class Rack::Protection::CookieTossing

def remove_bad_cookies(request, response)
  return if bad_cookies.empty?
  paths = cookie_paths(request.path)
  bad_cookies.each do |name|
    paths.each { |path| response.set_cookie name, empty_cookie(request.host, path) }
  end
end