added expiration time to session and displaying remaining time until auto-logout