A login via a cookie (either via controller or resource) should extend the lifetime of the cookie

[ogazitt]

If a user logs in before the auth cookie expires, we should renew it.