Set expiration properly on session cookies.

diff --git a/wrw/session.py b/wrw/session.py
index 273775b..43b9087 100644 (file)
--- a/wrw/session.py
+++ b/wrw/session.py
@@ -168,7 +168,9 @@ class db(object):
         return session(threading.RLock())
 
     def mkcookie(self, req, sess):
-        cookie.add(req, self.cookiename, sess.id, path=self.path)
+        cookie.add(req, self.cookiename, sess.id,
+                   path=self.path,
+                   expires=cookie.cdate(time.time() + sess.expire))
 
     def fetch(self, req):
         now = int(time.time())