Set cookies for petitions (and probably other online forms) as session cookies that will expire after signing
Aah, 

Indeed, the cookie should apply only to the petition (ie contain the petition id).

It's a bug and shouldn't be difficult to fix. Do you or someone in your team have the skills to fix it? PR welcome ;)