allow users to remain logged in for a while.