express-session: Set a finite cookie lifetime

src/node/hooks/express.js

@@ -186,6 +186,7 @@ exports.restartServer = async () => {
     // cleaner :)
     name: 'express_sid',
     cookie: {
+      maxAge: settings.cookie.sessionLifetime || null, // Convert 0 to null.
       sameSite: settings.cookie.sameSite,
 
       // The automatic express-session mechanism for determining if the application is being served

src/node/utils/Settings.js

@@ -322,6 +322,7 @@ exports.cookie = {
    * https://stackoverflow.com/q/41841880 for discussion.
    */
   sameSite: 'Lax',
+  sessionLifetime: 10 * 24 * 60 * 60 * 1000,
 };
 
 /*