Add session expiry checks