Use session_data's expiration by default for sessions and tokens