Use postgres as session store.
Set a default cookie expiration.
Max out cookie's date when user wants to be remembered.