Change session expiration after initialisation?

[eluser]Jondolar[/eluser]
You may want to use a separate cookie instead of a session cookie. You can then set the expiration of the cookie after you authenticate. If you use the session class, you need to configure a session timeout globally. You could set this to the maximum and then use data from the session to determine if the account should time out earlier (kind of backwards).