1 hour expiration instead of at browser close