Don't validate session expiration on login call. Otherwise you get an infinite loop.