Will the session ID expire at any point or can the user go back to it a