Right now, it seems like every time I bring up twostep on my phone, I am required to login. This is because we have a 24hr expiration on the cookie. Let's make it 7 days to reduce the burden of re-authenticating. We can make this contingent on browser-agent (mobile) if we are worried about leaving cookies on public machines...
Right now, it seems like every time I bring up twostep on my phone, I am required to login. This is because we have a 24hr expiration on the cookie. Let's make it 7 days to reduce the burden of re-authenticating. We can make this contingent on browser-agent (mobile) if we are worried about leaving cookies on public machines...