rest session expired handler