Please add a login/session timeout feature. Currently, users can remain logged in for days without re-authenticating.

It would be helpful to automatically log users out after a configurable period of inactivity to improve account security.