persistent sessions, so we can autodeploy and not log folks out