MM 6.0 Persistent login

By default, the Media Manager will remember a user that has logged in and automatically re-authenticate her on the next visit of the application. 

This presents a security impact in the unlikely event of a XSS attack on the application. 

Should a client choose to disable persistent login, this can be done by navigating to the Administration → Portals → Configuration and unchecking the option "Enable persistent login".