elgg.session.cookie() again handles missing options.expires