Google apps logout script breaks under Tomcat 8?

[Baron Fujimoto]

I realize this is not strictly a Shibboleth question, but other folks
using the IdP with Google Apps may find have already solved this or
find themselves in a similar boat.

We're using IdPv2 with Google Apps (via RemoteUser for AuthN). We
also use a logout script, cribbed from the shib-users mailing list,
for Google's logout function.

<https://groups.google.com/forum/#!msg/shibboleth-users/CFkau-FHCsA/yx7KRO9xMCoJ>
---------------------
Cookie c;

c = new Cookie("JSESSIONID", null);
c.setPath("/idp");
c.setMaxAge(0);
response.addCookie(c);

c = new Cookie("_idp_session", null);
c.setPath("/idp");
c.setMaxAge(0);
response.addCookie(c);

session.invalidate();
---------------------

This was working until I upgraded from the IdP's servelet container from
Tomcat 6 to Tomcat 8. Since then, the cookies no longer seem to get wiped.
Users are still logged in if they revist any of the Google Apps.

Has anyone else encountered this or have any suggestions?

Aloha,
-baron
-- 
Baron Fujimoto <baron at hawaii.edu> :: UH Information Technology Services
minutas cantorum, minutas balorum, minutas carboratum desendus pantorum