diff --git a/app.py b/app.py
index 4e5f899..91b5699 100755
--- a/app.py
+++ b/app.py
@@ -1,5 +1,6 @@
 #! /usr/bin/env python
 # -*- coding: utf-8  -*-
+import datetime
 from functools import wraps
 from hashlib import md5
 from json import dumps
@@ -27,9 +28,13 @@ from copyvios.auth import oauth_login_start, oauth_login_end, clear_login_sessio
 app = Flask(__name__)
 MakoTemplates(app)
 
+app.config.from_pyfile("config.py", True)
+app.config['SESSION_COOKIE_SECURE'] = True
+app.config['SESSION_COOKIE_SAMESITE'] = "Lax"
+app.config['PERMANENT_SESSION_LIFETIME'] = datetime.timedelta(days=365)
+
 hand = TimedRotatingFileHandler("logs/app.log", when="midnight", backupCount=7)
 hand.setLevel(DEBUG)
-app.config.from_pyfile("config.py", True)
 app.logger.addHandler(hand)
 app.logger.info(u"Flask server started " + asctime())
 app._hash_cache = {}
diff --git a/copyvios/auth.py b/copyvios/auth.py
index c9793b0..3b8eb44 100644
--- a/copyvios/auth.py
+++ b/copyvios/auth.py
@@ -39,10 +39,12 @@ def oauth_login_end():
         consumer_token,
         access_token)
 
+    session.clear()
     session["access_token"] = dict(zip(access_token._fields, access_token))
     session["username"] = identity["username"]
+    session.permanent = True
 
     return session.get("next", "/")
 
 def clear_login_session():
-    session.clear()
\ No newline at end of file
+    session.clear()