Encode session timeout in QR code