Make sure the session expiration information is present in the cookie

Hi,

the change that added session expiration data broke the bookings sample.  If you clear your cookies and try to login, it will fail the first time, and succeed the second time.  This is because the session information didn't make it to the cookie, and the session is getting cleared.  Therefore the code cannot see that the user has been authenticated.  At the same time, when asking the user to authenticate the second time, the TS key in the cookie is set, and the second authentication request succeeds.

With these changes the login works the first time.