Only invalidate session after 600 seconds when authorize form is displayed