Backend: no expiry set on cookie

[Southclaws]

storyden/app/transports/openapi/bindings/session.go

Lines 26 to 37 in 442adf5

	// Create an encrypted cookie from an account ID.
	func (j *cookieJar) Create(accountID string) string {
	return (&http.Cookie{
	Name: secureCookieName,
	Value: j.ss.Encrypt(accountID),
	SameSite: http.SameSiteDefaultMode,
	Path: "/",
	Domain: j.domain,
	Secure: true,
	HttpOnly: true,
	}).String()
	}

[Southclaws]

this should probably be 3 months default but configurable by the installation host.