session killer implemeting timed access