DentaQuest stores its MFA trust as a persistent cookie, not in LocalStorage like DDMA/Azure B2C. Deleting the Cookies file on startup wiped that trust token, forcing OTP on every app restart. Now only the credentials tracking file is reset on startup; if credentials change, _force_logout() still calls delete_all_cookies() for a full reset. Covers both eligibility and claim flows (both share the same DentaQuestBrowserManager singleton). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>