Updated cookie login process to be more robust.  The site now tracks token expiration dates and will refuse to log users in initially if their cookie has expired or mismatches credentials.  Logging in gives users a new token and expiration date.