[fix] Expire session cookie after 1 week