People may not log off but close the browser and so a cron job should update the database for non existing sessions.