Session expires after 4 hours of inactivity