Follow-up from "Add auth-cookie-session-timeout flag" - In Auth constructor use options struct

The following discussion from !834 (merged) should be addressed:

• @proglottis started a discussion:

  nit, not directly related to your change, but this constructor has enough arguments now that it's probably worth extracting an options struct.