[bugfix] cookie lib expects 'expires' to be date