#31 Fix vulnerabilities with the remember cookie

Unito

sindre ha unito 4 commit da session-cookie a master 5 anni fa

Autore	SHA1	Messaggio	Data
Sindre Stephansen	dafe82af0a	Make remember cookie HttpOnly Fixes #24	5 anni fa
Sindre Stephansen	1257cadf70	Secure remember cookie. This doesn't enable http-only	5 anni fa
Sindre Stephansen	56c14f149f	Reduce remember cookie expiry, and enforce by storing it in the database Fixes #14	5 anni fa
Sindre Stephansen	ba8b2e6153	Use random string for remember cookie, replacing deserialization The random string token is stored in the database, and is revoked when the user logs out. Fixes #17	5 anni fa