Sessions expire after 20 minutes of inactivity.