fixed auto-logout for inactive users