Thanks for Ion Auth it is working really well on my site.
I just wondered if anyone can please suggest a way of automatically logging out the user if they close the browser window without logging out.
I know that the session will expire automatically after n minutes. But it scares the users that if they close the browser and then reopen it soon after they are still logged in.
I wondered if I should create a second cookie with expiry set to zero (that expires on browser close) and require both cookies before allowing login?
Any ideas / suggestions would be gratefully received.