if ($config->{LOGIN_SESSION_TIMEOUT} && !$self->{is_new_login} && $self->username) {