refactor: use centralized session cookie helpers

internal/auth/handler.go

@@ -43,7 +43,7 @@ func (h *AuthHandler) HandleLogin(c *gin.Context) {
 		return
 	}
 
-	c.SetCookie("session_id", session.ID, int(domain.SessionLifetime.Seconds()), "/", "", false, true)
+	setPersistentSessionCookie(c, session.ID)
 	if c.GetHeader("HX-Request") == "true" {
 		c.Header("HX-Redirect", "/")
 		c.Status(http.StatusOK)

internal/auth/middleware.go

@@ -112,7 +112,7 @@ func AuthMiddleware(svc domain.AuthService) gin.HandlerFunc {
 
 		if usesCookieSession {
 			if refreshErr := svc.RefreshSession(c.Request.Context(), sessionID); refreshErr == nil {
-				c.SetCookie("session_id", sessionID, int(domain.SessionLifetime.Seconds()), "/", "", false, true)
+				setPersistentSessionCookie(c, sessionID)
 			}
 		}