Sessions expire after 8 hours of inactivity