how can i keep the user logged in forever unless he specifically clicks logout?
Cookies. Use cookies instead of sessions.