Use 10 minute expiry in OLAuth cookies, refresh br-loan cookie if needed.