Not setting the cookie timeout, it is better if the user can control this setting

Fixes #4239
Merge pull request #4240 from cakephp/3.0-fix-session

Not setting the cookie timeout, it is better if the user can control this