add expires to cookie remember_device

otherwise, cookie is expired when the browser session ends