Use short timeout instead of omitting it to prevent session cookie bugs
Clarify the new session setup in login UI
Synchronize expiration of sessions with cookie expiration
Merge branch 'feature/session_cookie_bug' into develop