Clear password when redirecting to login

Should prevent endless redirects when the cookie is set on a different path or domain (like with a dot prefix).

src/node/server.ts

@@ -298,7 +298,10 @@ export abstract class Server {
 						return response;
 				}
 				if (!this.authenticate(request)) {
-					return { redirect: "/login" };
+					return { 
+			   			redirect: "/login",
+			   			headers: { "Set-Cookie": `password=` }
+			   		};
 				}
 				break;
 			case "/static":