move cookie name and expiration data to config