To keep people logged in, put the pertinent variables in the cookies instead of the session Add a "remember me" option for authentication to allow the user to choose whether he wants to have his credentials pre-filled in the form next time