Luci.sauth.sessionpath and luci.sauth.sessiontime

I'm fiddling around with luci authentication and I am wondering two things:

  • Why isn't luci.sauth.sessiontime used to set the Expiry on the sysauth_http(s) cookie?
  • Is luci.sauth.sessionpath used? /tmp/luci-sessions doesn't exist on my device and I haven't quite tracked down where the session IDs are cached.