Where to reduce lifetime of the cookies user and password?

They are set to one year. For me one week is enough.
And: If i restart server, the cookies have still there function? Or in other words: How can i log out a user who has still "his" one year cookie?
Have a nice week

Restarting service invalidates all cookies, unless you enabled persistent cookies.