As staying signed in usually requires the use of cookies, you would need to add the domain to the whitelist in order for them to not have their cookies removed.