Authentication is based off of cookies. The access cookie will remain for one year if you don't logout.

As I've sort of already indicated there, I'm leaving it to you guys to figure out what you want to do with it, of course Chruser will have the final call.