Sessions expire after 15 minutes of inactivity.