Changed: Don't garbage collect session if there is a logon token that hasn't yet expired.