Credentials never expire

[thejm-12]

It might just be the lack of documentation or maybe a real issue but with my testing of v5.0.0-beta.20 Credentials never expire. JWT and Session have a default value of 30 days and every time it is accessed it updates the expiration date of the JWT and Session.

So this means the user is never logged out automatically. Am I missing something? I am trying to implement for a session to expire 7 days after login regardless of activity.