Add ability to control how the duration of the session cookie

[coryking]

By default session cookies are only 4 hours. We wanted to create a site that has a long-lived cookie so users would not have to constantly re-auth.

This pull request lets you configure the max age of the session used to store the auth token.