make sure session cookie is secure and has an expiration date

app/__init__.py

@@ -74,6 +74,11 @@ def create_app():
     app.register_blueprint(topics_bp)
     app.register_blueprint(users_bp)
 
+    app.config['SESSION_COOKIE_SECURE'] = True
+
+    @app.before_request
+    def make_session_permanent():
+        session.permanent = True
 
     @app.context_processor
     def inject_constants():