Cookie token provider receives lifetime parameter