https://ones.com/blog/knowledge/implementing-secure-session-timeout-best-practices-code-examples/