Use permanent session so that we can time them out
Setting flask.session.permanent should be made within a request context, here for each requests
Release 1.18.3 and adjust documentation accordingly