reduce default session expiration limit
implement some tweaks to session handling; properly remove session cookie if invalid/login failed
search: allow searching by note text
search: simplify code, allow searching by note and title content (note:blah, title:blah)
enable remember me