Session never expires.
Arabic characters allowed in URLs