implement issue #15 - allow users to stay logged in (session.permanent)