added limited time for user sessions