SCAL-270: user session expiration