Set the cookie duration for 'user' and 'roles' as well, so that they survive a browser restart.