Implemented cookie expiration to 3 days by default. Added filter to intercept all requests under /secure and check for authentication