Every authenticated session has a lifespan, and how you define it determines both the security and usability of your app. Too short, and users get frustrated by constant logouts. Too long, and you ...