Is there a downside to making a load balancer hold a session for a connected computer for an hour? The only thing I can think of is if the web server they are connected to for that time fails they lose their session and have to log in again because they would be connected to a different web server after that.
I've tried storing the sessions in a db and in a shared folder and neither are great solutions. DB server gets overloaded with requests and very occasionally the data doesn't replicate fast enough to the other db servers. The file sharing sometimes doesn't work either. Not sure why but it was quirky so I quit.