longer session expire time. some clients crash instead of reauthenticate
401 seems more appropriate to indicate an expired session
improved getTagValue
using the real path allows the extractor to get the file size, but breaks many other things