expire cookie at browser close, instead of 24 hours