@User yes. It can be enabled that way. However, the downside to this is that it will cause a db lookup for every session verificaiton request which might affect performance.