Unfortunately, as described in this article, you can’t rely on cookie expiration time since it is measured by a client browser, and noone can guarantee that the client system clock is not one year ...