Session countdown timer

Session is now watched by javascript on client-side. When it times
out, user is logged off (the token is revoked) and redirected
to status page.