added session refresh when session is expired - not invalid