as a user works on the site their expiration time should be updated to now + 1hr, as you have stated it, at 61 minutes I will have to login again. It should be after an hour of not making changes.