I think he meant that when he posted, it posted twice for him.

I suppose I could. Would you rather have this setting be in the config.json or as a meta setting?

I believe the way it is programmed at the moment is to behave as a browser session. Meaning, your session will only last as long as you have your browser open, and once you close it you will log out. This should be able to be changed easily by changing the max age in the session middleware. Since if this max age is 0, then it will behave as a browser session, otherwise it will be the amount of time (in milliseconds I think) after logging in that the session will expire.