This makes the gem store a signed cookie for a configurable amount of
time that allows the user to bypass 2FA. Our use-case for this is that
we expire user’s Devise sessions after 12 hours, but don’t want to
force them to authenticate using 2FA every day.
Signed cookies are available since Rails 3. This requires the signing
functionality to be properly configured, but is disabled by setting the
config variable to `0`, the default.
Paul Bowsher
Laust Rud Jacobsen
Karol Sarnacki
Ross Kaffenberger
Matt Mueller
John Bradley
Dmitrii Golub