Cookies should expire in a session by default

Refs #8. While Remember Me functionality is should be setup using the session-contrib package, we should make sure our Cookies are Session cookies by default. Otherwise we can leave a logged in cookie on a user's computer (which could be in a public location or who knows where).