make SimpleSAML login persistent until logoff