central login timeouts, rememberme framework