allow multiple logins on multiple machines.
set a clean up time for sessions, e.g. 30 days.
renews on every login