set cookie expiration to 1 month