Added max_age for the fake session cookie

This is to match the actual session cookie so that they expire together