Fix cookie age in app-auth

[unhighghlow]

The "expires" parameter was ignored, and the cookie was set to delete on session exit, which is really annoying. This PR fixes this.

NOTE: I honestly have no idea how to test this, so I didn't.