Put "back" back.
Use redis to store sessions.
Set session cookie expire at one month.