Use providerUser for clear obj checking

Because the code in one function diverged from the
other, different variables were used which caused objects
to be manipulated that were not the correct objects.

This migrates back to using `providerUser` which makes
SSPI tags work again.
Time out SSPI sessions after 60min

If we don't time out the session, then changes made
on the SSPI provider won't be reflected because
the session never expires.  Timing out the SSPI sessions
explicitly causes this to timeout.