EDX-640: get session expiry from settings