Added server side session expiry