I would have thought it was the AllowPersistentLoginP parameters. There is one in Kernel and another in ACS Subsite.
Brian