Pick someone to work with. Have them manually delete their cookies for your site. Then see if they can log in again.