AJAX call and shibstate cookie accumulation.

[Koorosh Vakhshoori]

>>Now our solution is to first catch the session time out in JavaScript
>>and delete all _shibstate_xxx cookies by setting their expiration date
>>into past and redirect user to the login page. Any comments or
>>suggestions?
>
> https://issues.shibboleth.net/jira/browse/SSPCPP-444
>
> You can also stop using cookies for relay state, and it is no longer the
> default.
>
Great, I will look into that.

Thanks,

Koorosh