Session expires after 20 minutes of inactivity