Sessions expire after 12 hours of inactivity