Moved cookie settings from login.js to app.js