OnlineUser: ignore stale sessions