The status a session is saved in a cookie. This cookie contains an encrypted security token which is used to restore a login to the API Server if the API Server was restarted in the mean time. The security token is cryptographically signed by the certificate selected on installation.
NOTE: If the API Server's current user restarts the browser, the cookie and its session information are reset.