add concept of maximum session lifetime so we have an upper bound on subscription lifetimes and also force the client to reconfigure once a day
constant-ize max session lifetime
configure impersonated sessions with the endpoints for that principal
drop changePassword and resetPassword from the API
Merge branch 'master' of https://github.com/nitrogenjs/client