[iamdual]

Yeah, tested. They fixed.

[aendruk]

Did you select “Remember me” in your test?

[iamdual]

Yes, I found a remember me button on an external login page. There was a base64 encoded cookie but not in plain text. It was JSON string, includes some AES like encryption data, and expiry time.