add session lifetime management