Add tests related to session invalidation and redirection to the dedicated login page
Improve redirection behavior by redirecting when an invalid cookie is sent, instead of returning a 401 and deleting the cookie, requiring a second refresh before the redirect was fired.
Context
cc/ @ingalls