Make session expiry time configurable.