Cookie set to expire 30 minutes after loading any page. It resets each time a page loads. Any AJAX request made from the page will return a Session Timeout message and reload the page after 30 minutes.
Cooke set to expire midnight of the coming day based on the user’s timezone.
Deactivated users or failed logins redirect to a page, which resets cookie based on page (30-min).
The cache resets after 2 days by a server cron job.