Session timer now uses browser's time, which is likely to be different than...

Session timer now uses browser's time, which is likely to be different than the server's; added SESSION_ACTIVE cookie to track whether a user is logged in and will log out other browser windows if false.