added server side time_to_live of session data, when the session_data is expires the session gets reset.
make the spec clearer on the fact that each request will reset the timeout-timer for the session
straighten up the logic flow
Merge pull request #8 from mkristian/timeout

added server side time_to_live of session data