Use SESSION_COOKIE_PARAM for remember user cookie

Also, let's use USER_FOREVER_COOKIE_LIFETIME instead of the hardcoded
duration of 1209600