Phabricator currently sets some cookies (e.g. `PHSID` and `PHUSR`) with a lifetime of 5 years. Information privacy rules in our organisation require us to only use session cookies. I could not find a knob for it – is it possible to enforce this in Phabricator?