Is there a way to set a user/session expiration programmatically. Basically, given a session handle, can I set the expiration?