added expiration timer for user inactivity