fix session expiry timer to keep alive until user is idle