I want to believe that the auth code I wrote checked session_expires originally. I bet I'm also the one that took it out. :-(