Feature: 20 minutes session with automatic logout.
Intent: Prevent session hijacking.
Result: Users saving their credentials in the browser to alleviate the inconvenience of typing them often, making session hijacking easier.