You are correct that you must use sp_setapprole to invoke the app role, but if you do this without setting the cookie you cannot revert since the cookie is what allows you to revert. Where does it say anything about setting the cookie option? That's why you can only reconnect to revert to the original context. If you don't believe me just try it yourself.