It looks like an expiry time is only set if the
"allow_persistent_cookies" configuration is set to `true`, which is
`false` by default, however.  See the `max_age/0` function in the
couch_httpd_auth module.