Feature: add 'logged in timeout'

[filoxo]

It would be really interesting to have a "logged in timeout" feature where the user is notified that their session will expire, and to expire it if that timeout is not refreshed/acknowledged. This will need to add logic into the Auth lib to redirect automatically, etc. This may be a good time to consider if the consuming applications actually need data if a user is not authenticated, or if they should simply not render if there is no auth data. TBD.