This is on EE 2.10.1.
Website Sessions are set to Cookie Only.
$config['sess_expiration'] = 1440;
$config['sess_expire_on_close'] = TRUE;
phpinfo()
reports session.gc_maxlifetime
of 1440
;
User logs in, cookie is set. User closes browser and opens again and finds that the cookie has not been cleared and so they are still logged in.
How can we enforce session cookies to expire when the session ends?