session expiration policy was added