Sessions auto-expire after 15 minutes of inactivity.