Not setting the cookie timeout, it is better if the user can control this

Fixes #4239
No, that's sure not what most would want. It should simply be a very high default value.