notify user to re-authenticate when session expires