changed cookie expiration date to 3 years