[Pagekit-users] Session questions

[Sean L. <se...@ch...>]

Hello Group,

I was wondering why pagekit maintains 2 different cookies and manage 2
different session data (if I'm right about this).  For users that are logged
in and that are not.  Is there any reason let it be security, or any other
reason for this?

If I set not to expire cookie by putting (+100y) in config, visitor session
cookie will stay for that long, but when they login and logout they get
reset anyways to new session, so I don't know what is the good thing about
setting it long.  And is there any way to have authenticate session to not
to expire?  

So much stuff about pagekit session management doesn't really make good
sense to me can someone explain why it was implemented that way (maintaining
2 different sessions for logged in and not logged in) in detail?  Or is
there good practical way to have only one session for pagekit?

Thank you
Sean

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.719 / Virus Database: 475 - Release Date: 12/07/2004