#31 Fix vulnerabilities with the remember cookie

Merge aplicado

sindre aplicou merge dos 4 commits de session-cookie em master 5 anos atrás

Autor	SHA1	Mensagem	Data
Sindre Stephansen	dafe82af0a	Make remember cookie HttpOnly Fixes #24	5 anos atrás
Sindre Stephansen	1257cadf70	Secure remember cookie. This doesn't enable http-only	5 anos atrás
Sindre Stephansen	56c14f149f	Reduce remember cookie expiry, and enforce by storing it in the database Fixes #14	5 anos atrás
Sindre Stephansen	ba8b2e6153	Use random string for remember cookie, replacing deserialization The random string token is stored in the database, and is revoked when the user logs out. Fixes #17	5 anos atrás