@Test
public void logoutResourceDeletesSessionCookie() throws Exception {

  NewCookie cookie = cookieFactory.getSessionCookie(User.named("Me"), ZonedDateTime.now(clock).plusDays(1));
  Response response = sessionLogoutResource.logout(cookie);
  assertThat(response.getStatus()).isEqualTo(200);
  String resultCookie = response.getMetadata().getFirst("Set-Cookie").toString();
  assertThat(resultCookie)
      .contains("HttpOnly")
      .contains("Secure")
      .contains("Path=/admin;")
      .contains("session=expired;");
}