code: private void attemptToRemoveLtpaToken(WebRequest webRequest, HashMap<String, Object> props) {
          SSOCookieHelper ssoCh = webAppSecurityConfig.createSSOCookieHelper();
          if (!isFormLogin(props)) {
              HttpServletResponse res = webRequest.getHttpServletResponse();
              if (!res.isCommitted()) {
                  ssoCh.removeSSOCookieFromResponse(res);
              }
          }
      }
docs: /*
  Remove LTPA token if this is not a FORM login and the JASPI provider has not committed the response.