login session duration (Close #31)