implements max idle time in User - 30 days if logged in, 1 day if not -
so that logged in users eventually get cleaned up
moves isLoggedIn check to _udpateDb in User