Make logged-in cookie name configurable via options (#5430)

The logged-in cookie name was hardcoded as 'loggedIn' with TODO comments
indicating it should be configurable. This is needed for deployments
where multiple Apostrophe instances share a domain (e.g., staging and
production on subpaths) and need distinct cookie names to avoid conflicts.

Changes:
- Added 'loggedInCookieName' option to the login module (defaults to
  'loggedIn' for backward compatibility)
- Replaced all hardcoded references with self.loggedInCookieName
- Removed the TODO comments

Usage:
  modules: {
    '@apostrophecms/login': {
      options: {
        loggedInCookieName: 'myAppLoggedIn'
      }
    }
  }

Addresses the TODO comments:
  'get cookie name from config'

Co-authored-by: Vangalla, Rohith <rohith.vangalla@optum.com>

Author: RohithVangalla1

packages/apostrophe/modules/@apostrophecms/login/index.js

@@ -47,7 +47,7 @@ const { createId } = require('@paralleldrive/cuid2');
 const expressSession = require('express-session');
 
 const loginAttemptsNamespace = '@apostrophecms/loginAttempt';
-const loggedInCookieName = 'loggedIn';
+const DEFAULT_LOGGED_IN_COOKIE_NAME = 'loggedIn';
 
 module.exports = {
   cascades: [ 'requirements' ],
@@ -77,6 +77,7 @@ module.exports = {
     whoamiFields: []
   },
   async init(self) {
+    self.loggedInCookieName = self.options.loggedInCookieName || DEFAULT_LOGGED_IN_COOKIE_NAME;
     self.passport = new Passport();
     self.enableSerializeUsers();
     self.enableDeserializeUsers();
@@ -164,8 +165,7 @@ module.exports = {
             const name = self.apos.modules['@apostrophecms/express'].sessionOptions.name;
             req.res.header('set-cookie', expireCookie.serialize(name, 'deleted'));
 
-            // TODO: get cookie name from config
-            req.res.cookie(`${self.apos.shortName}.${loggedInCookieName}`, 'false');
+            req.res.cookie(`${self.apos.shortName}.${self.loggedInCookieName}`, 'false');
           }
         },
         async whoami(req) {
@@ -934,7 +934,7 @@ module.exports = {
       // Awaitable wrapper for req.login. An implementation detail of the login
       // route
       async passportLogin(req, user) {
-        const cookieName = `${self.apos.shortName}.${loggedInCookieName}`;
+        const cookieName = `${self.apos.shortName}.${self.loggedInCookieName}`;
         if (req.cookies[cookieName] !== 'true') {
           req.res.cookie(cookieName, 'true');
         }
@@ -1201,8 +1201,7 @@ module.exports = {
       addLoggedInCookie: {
         before: '@apostrophecms/i18n',
         middleware(req, res, next) {
-          // TODO: get cookie name from config
-          const cookieName = `${self.apos.shortName}.${loggedInCookieName}`;
+          const cookieName = `${self.apos.shortName}.${self.loggedInCookieName}`;
           if (req.user && req.cookies[cookieName] !== 'true') {
             res.cookie(cookieName, 'true');
           }