About a week ago I upgraded the script on my site and recently I've had a few people complain about having to login all the time. So I did some investigating and found this:
class.auth.php [line 290]
//$s = json_encode(array('un' => $un, 'pw' => $pw));
//return setcookie('spf', $s, time() + 60...