Just do a redirect with session as a query parameter (like many OAuth apps do it anyway). Each site can then persist the user session for more than a month.