A 4 hour cookie seems a bit short, yeah. I usually use session cookies unless they click the "remember me" button, in which you'll get a year-long cookie.

// @height8