Fixes to caching of logged in user content: support multiple set-cookie headers; set the expiry of vuserhash to be as long as the session