keep track of activity and timeout a session older than 5 minutes (default)