thanks, so basically you're hashing a token a each time a request comes in you decode.. do you increase the session expiration date or keep it as is?