Persistent Login Cookies ("Remember Me" functionality) are a danger zone
On the one hand, Remember Me are entirely as safe as conventional logins when users understand how to handle them.
On the other hand, they are an enormous security risk in the hands of careless users, who may use them on public computers and forget to logout, and who may not know what browser cookies are or how to delete them.
More Information#There might be more information for this subject on one of the following:
- [#1] - The definitive guide to form-based website authentication - based on information obtained 2016-08-10