Server-side `find-first`, cookie expiry.

Two random things lying around locally.