Handle expired cookies more cracefully (could also be caused by remote computer having a wrong time (out of ntp sync).. but most likely it's a faked cookied).

Same could happen after change of password (also if salt/pepper were modified)