Only refresh the login cookie if it's 28 days or closer to expiration.