session idle and max lifespan