A documentation update
Glob-based exemptions
Outsource the cookie setting logic
Renew the cookie on success