Don't rely on cookie expiration dates. Use the cookie content to look-up a record in your database that tells you whether to honor the session anymore or not.