I'm working on what is essentially a private site.  A login is required to access it.  There is no private, public, or verified registration involved.  There are never more than 25 users so I have complete control over who is authorized and who isn't.

The people that use the site are "too busy" to be "bothered" with entering their login credentials more than once (gimme a break).  Although I tried to persuade thier boos (my client) that this was not a good security practice, unfortunately he agrees with his employees.

I'm assuming a cookie is used to "Remember Login" but I can't find where to make the cookie valid for an indefinite period of time.  Where do I do this?