I'm actually still having a problem.
If persistant login is prevented, I presume this is by taking the
-forever option off ad_user_login, how does a user stay logged in for more than the period of the tempory cookie( I'm not sure it this is a tempory cookie or a session) ?