Cookie factory moved to services
Cookie expires when token does