title: Keycloak cookies - KC_RESTART validation
body: <p>I was going through Keycloak cookies, and specifically on KC_RESTART.
  While reading on link : <a href="https://github.com/keycloak/keycloak-community/pull/16/files/4c9b955990190344a3f1ed98c0a0a1dd62d1e8ec" rel="nofollow noreferrer">Keycloak Authentication flow</a>
  found that KC_RESTART will be used to re-create authentication flow when browser root session is expired.</p>
  
  <p>I was wondering how keycloak is validating this cookie. So after session out(which i set through keycloak admin console: <strong>SSO Session Idle</strong>) i tried to modify KC_RESTART cookie before accessing authenticated API and still it returned with <strong>200 OK</strong> response.</p>
  
  <p>Which means this cookie was not getting validated.</p>
  
  <p>Can anyone guide if my understanding is correct.
  If this is not correct way to test then please tell me how to test if Keycloak is validating this cookie.</p>
  
  <p>And if this cookie is not getting used then how to disable it?</p>