Changed the session expired repsonse code to a more appropriate code.
Actually use "MAX_SESSION_LENGTH" config value.
Save session expiry time when verifying session in case it's needed.
Fixing derp.
Initial commit of data endpoint (with data_send request)