use configured session expire time

All oc_ cookies are set to ``remember_login_cookie_lifetime``, but ``oc_token`` should probably be set to ``session_lifetime`` or you are logged in for 15 days.