Session timeouts: they needn't exist | Hacker News Reader