If the cookie expires after an hour, we don't have to worry quite so much about users who offboard someone from a team or organization but forget to increment the cookie_version - since offboarded employees will be able to access Datasette for a maximum of an hour after they last authenticated.