Added test for session expiry