Not setting the cookie timeout, it is better if the user can control this

Fixes #4239
Browser sessions are nice in a way as closing the browser logs you out.