sessions do not expire when the are revalidated