Added session lifespan and fail login past lifespan

If a user attempts to log in after the session lifespan has expired,
then the login fails and are directed to enter their credentials.

Session lifespan is a timedelta, so it can be added to datetime.now to
determine the new date of a new session.