add expiration date for _reviewed_token cookie

the _reviewed_token cookie didn't have an expiration date so it would be a session cookie and editors would get "logged out" if they closed their laptops or left them on overnight or... whatever things cause chrome to say "time for a new session".  This sets the expiration time to 1 week.