Rolling passport session with updating the client's session cookie.
Remember me option on login with a longer session expiration.
Some authentication configurations can be set into ./server/config/auth.js