session expiration check.