Session token lifetime configuration

Session token lifetime configuration based on `<sessionTokenRequirement>` (if present) `lifetime` attribute.