allow persistent sessions