Make the default expiration time configurable and always set an expiration time even if no cookie is present.