Don't logout idle users after enabling "remember me"

Only call idle logic when ```session.isPersistent()``` is false.
Convert milliseconds to seconds before using them for the cookie expiration.

Fixes #618.