Right, I'd somehow not noticed that Syndicate was storing session data in a cookie it sent to the user, now allegedly this is safe... but I can't believe it.
So I've moved it to storing it server side, one of the downsides is that before your logins might have persisted across browser restarts. They now wont.... unless you use the new shiny feature called "Remember Me".
It works by sorting a random 32 character string on your machine, each time you go to the website your browser hands it over and the website looks it up and logs you on. It will last 30 days without use, every time you use it the counter is restarted.
You can log in multiple times all over the place, however it uses the same secret key. On the settings page is a button to reset the Remember Me code if you log in somewhere you shouldn't have and want prevent it logging in as you.
Enjoy,
P.
