Fix login loop after idle sign-out

Idle sign-out left a stale activity cookie in the browser. When you logged back in, middleware saw that old cookie and treated you as still idle, signing you out again before the dashboard loaded. The activity cookie is now cleared on idle sign-out and refreshed on successful login.