[wladimir]

Expiring the session might be a neccesary evil. But please, at least try to remember the form contents when the user re-logs in.