Manage the login cookie token manually

ngCookies doesn't let you specify an expiration date. That's
unfortunate. Write to document.cookie directly instead.