fix: only call clearCookie for logged in users

.gitignore

@@ -1,3 +1,4 @@
+dist/
 yarn.lock
 npm-debug.log
 node_modules/

src/middleware/headers.js

@@ -56,7 +56,7 @@ module.exports = function (middleware) {
 		}
 
 		// Validate session
-		if (req.uid && !req.session.meta && !res.get('Set-Cookie')) {
+		if (req.uid > 0 && !req.session.meta && !res.get('Set-Cookie')) {
 			res.clearCookie(nconf.get('sessionKey'), meta.configs.cookie.get());
 		}