modified the auth cookie, provided a 14 day default expiration