Make detection/recovery for bad cookies more strict

Summary: When a user has bad cookies, try to clear everything and tell them they
might need to manually clear things.

Test Plan: Added "&& false" to the valid branch and got the exception message.

Reviewers: jungejason

Reviewed By: jungejason

CC: aran, jungejason

Differential Revision: 839

src/applications/base/controller/base/PhabricatorController.php

@@ -52,7 +52,11 @@ abstract class PhabricatorController extends AphrontController {
         $user->loadFromArray($info);
       } else {
         // The session cookie is invalid, so clear it.
+        $request->clearCookie('phusr');
         $request->clearCookie('phsid');
+        throw new Exception(
+          "Your login session is invalid. Try logging in again. If that ".
+          "doesn't work, clear your browser cookies.");
       }
     }