Force SSL only cookies for remember_me, adjust confirmation expiration time to fit with the user cleanup scheduler