added a flag for issuing persistent login cookies