[keycloak-dev] regarding expired sessions and token life-span