fixed token session expire length calculation.