To ensure a secure session management, you should configure the session parameters as required.
If you set the authentication token to active, the checking interval to e.g. 10 seconds and the maximum lifetime of the authentication token to 3600 seconds, that means that every 10 seconds it will be checked if you are inactive. If you are inactive for about 3600 seconds, you will be automatically logged out.