vps/views: fix coupon code box
invoice: add unfinalize button
totp: set an expiry date for the cookie that remembers TOTP authentication