Bots are perfectly capable of simulating long user sessions. Many large-volume scrapping traffic for example simulate lots of long persistent user sessions.