Issue with large HTTP headers for ECP authentication

[Cantor, Scott]

If you don't want/need the ECP client to retain sessions for SSO, it can stop remembering the cookie but you don't control this client.
 
I imagine there's something stale that's not really valid or needed being kept around and accumulating in the cookie, but there are no bugs open on it and I don't see any older commits that might have to do with it if it's a known issue.

-- Scott