We're using cookies to hide broadcast messages, but didn't set an
expire date. This MR fixes this by adding an expire to the cookie
to the ends_at date of the broadcast message (which must be set).