Remove unused session variable
Use cookie to keep user logged in for 30 days