fusionauth.timezone is used to guess the user’s current timezone so we can adjust dates and times in the UI (admin).

fusionauth.remember-device records your answer to ’remember this computer` checkbox on the login page (so you won't be prompted for MFA on this device again).

Yes. You can use the Authorization Code grant with cookies. Here is a workflow diagram of this: https://fusionauth.io/learn/expert-advice/authentication/webapp/oauth-authorization-code-grant-jwts-refresh-tokens-cookies/

That's great to hear, glad you figured it out!

@chakshu

Sorry, I pointed you to the incorrect setting.

You can go to Applications > FusionAuth > Edit > JWT > Refresh Token duration

Changing that to 1 (the value is in minutes) caused me to be signed out of the admin application after 60 seconds.

Hope that helps.