Add session expiry and basic logout