update cookie expiration to 'never..'