Use sliding expiration for cookies and require SSL. Fixes #10