Handle cookie_expiry_time in SecondFactorAuthenticationAcceptor