Signing in sets a cookie that lasts 30 days. The agent is unaffected — it authenticates with its own token.