Added configuration to never store password in session - most secure option.
Changed default configuration.