Sliding expiration

Pushing a TTL back on every use, so a session ends after 30 minutes of inactivity rather than 30 minutes after login.