Added login expiry to base auth service.

This can be set from any auth service to determin the length of time the auth cookie shoud live. By default it was last the length of the browser session.