Session variables are now used for log-in. Most installations have a 1440 second garbage collection for session info, which (i *think*) means that editors will be logged out at that time.
An AJAX script could periodically "phone home" to keep the login current...
At the very least, the issue needs to be researched and documented.