Cookie session expiration

I added handling for cookie expiration times of -1, which is the browser standard for "expire at end of session".