Web: set cookie maxAge to allow for a persistent login

Fixes gh-48