User session is persisted in cookie