Destroy cookie if $_COOKIE[SECUREPAGES_SESSID] exists on unsecured page

I think that if $_COOKIE[SECUREPAGES_SESSID] is found on an unsecured page load then the session should be destroyed.

function securepages_prevent_hijack_init() {
...
  // If the cookie exists on an unsecured page then there's a chance for the
  // session to be stolen.  Destroy the session.
  elseif (!securepages_is_secure() && isset($_COOKIE[SECUREPAGES_SESSID])) {
    watchdog('security',
    t('Session hijack attempt detected for user %user!',
    array('%user' => $user->name)));

    session_destroy();
    $user = drupal_anonymous_user();
    sess_regenerate();
    drupal_access_denied();
    exit();
  }