[BUG] Login cookie expires too soon (even if remember me is checked)

[Bit]

We need to fix this, because session ends after an hour.

Also, all cookies are not using secure flag which is compromising the security of the user in case of xss injection.

[Richterlevania3]

For me it's even weirder: if I check the remember me option, it won't let me login at all, saying my password is wrong and throwing captchas at me.

[Kestrel]

Admitadly we have not done a great job of handling the forum SSO and login features.

We should have those fixes to the session timeout and Secure flag set now. Could you confirm when you get a chance?

[Bit]

Unfortunately, it's still not fixed as the tw_sso cookie which controls the duration of login session is still only 2 hours long.