Mitch,
Good question. Unfortunately gae-sessions doesn't provide direct support for expiring cookies when the user closes their browser (i.e., not setting an expiration date for the cookie).
You could, however, implement this without too much trouble. Two possible approaches:
1) One approach might be to change the handling of the expire_ts parameter (to various functions) so that when it is None, the expiration date would not be set on the cookie. You'd also need to update code which relies on get_expiration() (as well as that function itself) to handle sessions without a specified expiration date.
2) A simpler approach might be to set a variable on each session which specifies what kind of session it is. For example, set session['public_pc'] to True or False based on whether the user is on a public computer or not. Then, in make_cookie_headers(), you can check the value of this session variable before deciding whether to use the existing COOKIE_FMT string, or a modified version of COOKIE_FMT which doesn't supply an expiration time.
The latter should be pretty easy to work in, at the expense of a tiny bit of overhead in the session. The former is probably the more "correct" solution but would require a little more hacking. Let me know how it turns out!
~ David
PS. Sorry for the slow reply, I overlooked this message!