title: How does remember me differ from session timeout
body: <p>I have built an app in CakePHP that allows a user to login and do some stuff, it keeps the user logged in for about 24 hours I think by default. And this is handled by a session/cookie as a cookie also gets created...</p>
  
  <p>1.) So what would a remember me bring to the party? As all that would do is create ANOTHER cookie that sets a timeout and keeps the user logged in... But this functionality exists in every single app by default with the session right? But I've seen lots of sites doing this but I don't get why as the session is doing this out of the box :/</p>
  
  <p>2.) Also how come sessions expire even if a user continues to use a website? e.g. if I set it to be 1 minute but refresh every 30 seconds it will still expire... but I kept the site active before it could expire so how could it still did expire? This is annoying as I have a expiration for an app of 1 hour but even when the client is using the site it expires after 1 hour regardless of activity.</p>
  
  <p>Would be great if someone could answer these 2 questions.</p>
  
  <p><strong>UPDATE: I've created a bounty on this in the hope of getting a CakePHP expert to help fix this problem. The issue is that the Sessions expire after the timeout REGARDLESS of user interaction. What I want to do is say I have a session lasting 5 minutes, and the user causes a postback every 30 seconds, then that session will still be around after the 5 minutes. This is not the case at the moment...</strong></p>
  
  <pre><code>Configure::write('Session', array(
          'start' =&gt; true,
          'defaults' =&gt; 'php',
          'timeout' =&gt; 1,
          'cookieTimeout' =&gt; 1,
          'autoRegenerate' =&gt; true
      ));
  </code></pre>