- [x] create session only when some data is added/updated - [x] delete cookie on logging out - [x] set session cookie lifetime correctly!? - [x] add TTL, use it for remember me - [x] delete expired cookies by TTL and by expiration time (7d) and anonymous expiration time (24-48h) - [x] shorter session idle time for guests - [x] don't send set-cookie each time ? - [x] live update for inactive tab should still work but with much much longer interval