11 Commits

Author	SHA1	Message	Date
Eric Schultz	01bd18b46f	remove leading dot in login cookie domain	2019-09-08 16:45:57 -05:00
Eric Schultz	0b765531fe	logon session uses a unique name now	2019-09-07 01:42:06 -05:00
Eric Schultz	facb1fbe86	only secure cookies when using https	2019-09-06 13:37:03 -05:00
Eric Schultz	c6b1b4a61b	strip port number from cookie domain	2019-09-04 19:31:09 -05:00
Eric Schultz	4769995968	regenerate session id upon logout	2019-09-04 00:12:09 -05:00
Eric Schultz	464a187d42	use a valid shortcut icon for the login page	2019-09-03 23:15:50 -05:00
Eric Schultz	b0f8f47c24	regenerate session id upon login	2019-09-03 23:05:18 -05:00
Eric Schultz	c148ed30f7	improve security on session cookie	2019-09-03 23:00:54 -05:00
Eric Schultz	ad988f5b99	show warning on login page when browser cookies are disabled	2019-08-30 14:54:21 -05:00
Eric Schultz	63053a8d1f	remove 'admin' alias for login page	2019-08-30 14:30:42 -05:00
Tom Mortensen	4c6c950042	Support forms-based authentication for login/logout. ... Username 'admin' is alias for 'root'.	2019-08-17 13:08:41 -07:00