Always set session[:updated_at] to avoid logging out users when the administrator turns on session expiration.