Refactor API routes.
Expire login sessions every day.

30 mins is super annoying, you have to keep on logging back in all the time.