Start using the Persistent Login module for extra security/reliability

[Ambient-Impact]

The Persistent Login module:

The Persistent Login module provides a "Remember Me" option on the user login form. Persistent Login is independent of the PHP session settings and is more secure (and user-friendly) than simply setting a long PHP session lifetime.

2.1.0 of the module was released recently with a couple of cookie improvements and fixes (helped along by yours truly) so this should work for us with our current cookie hardening set up.

The remaining blocker is that Persistent Login doesn't seem to work with the TFA module.

---

There's also an open issue to create a better UX for the logged in sessions and the ability to log out some or all of them that we could help out with in the future.