Fix #6: add an option to authenticate a user forever