Can now specify explicit cookie timeout.