comment out expire session auth token on timeout