EUCA-8390
ensure xsrf cookie expires properly.. 30 minutes when no user session, or at end of session when logged in