Hi @KPS ,
The difference between these two settings is that sessionCookieValidity
determines the time before a user gets disconnected if they did not check the "Remember me" option, and permanentCookieValidity
determines this when this option was checked.
If you want to force users to be disconnected after 12 hours regardless of how they connected, I think you need to set both sessionCookieValidity = '12 hours'
and permanentCookieValidity = '12 hours'
.
However, this memory increase you're experiencing is intriguing, it is not an intended behaviour.