check for expired session