Extended user sessions

Closes #2 

Standard (non-extended) session length is determined by `NDB_USERS_SESSION_STANDARD_DAYS` global in `config.py`.

The default cookie expiration for non-extended sessions is limited to the user's browser session.