[anon1252]

> and expiring it when you log-out?

and how would you do that if the user doesn't actively log out of a service?

[justaaron]

set the cookie in the response to their next request to you?

specifics depend upon the language and framework used on the server, etc...