Keep active sessions alive

Session handling should keep users who are actively interacting with the UI signed in and avoid timing out while they're working, so active workflows are not interrupted by session expiry.