Session lasts 30 days on this browser. If this instance is reachable beyond your own machine, it should be behind HTTPS.