Removes session duration support

It should be decided server side or for basic-like authentication, no more than a browser session