totp: set an expiry date for the cookie that remembers TOTP authentication