lifetime is set for 1 year from login time, but still need more security

lifetime is set for 1 year from login time, but still need more security