remember users who've logged in

After a user's logged in, remember their username, and automatically log them in in future browser sessions.

Some good documents on this:

* http://jaspan.com/improved_persistent_login_cookie_best_practice
* http://fishbowl.pastiche.org/2004/01/19/persistent_login_cookie_best_pra...

Most good software implements this feature; it would be worthwhile to review how it works in other software. In particular, I've never seen anyone implement the no-changing-passwords requirement in the above descriptions, but it's a really good idea.

->This has been added. --[[~Evan Prodromou]] June 26, 2008, at 04:57 PM