Right now, when the page is reloaded, the in-memory state (logged in user) is lost. And one has to login again (although one might have a valid session token).
- Add a mechanism which keeps the user logged in as long as he has a valid session token at hand, also when re re-freshes the page.