webui: remove passwords from sessions, 'remember me' works for all auth types (#4134)

* Updated to remove passwords from sessions

* Remove users sessions when user deleted

* Updated when cookies are set

* Updated setcookies to always contain a value

* Added destroy_cookies() to remove users cookies on failed login

* Removed debug line

* Fixed graph issues
This commit is contained in:
Neil Lathwood
2016-09-13 03:41:19 +01:00
committed by Tony Murray
parent a710c4a33c
commit deb4b74bc9
10 changed files with 55 additions and 83 deletions

1
sql-schema/133.sql Normal file
View File

@@ -0,0 +1 @@
ALTER TABLE `session` ADD UNIQUE(`session_value`);