Check if session token is valid and log user out if the check fails

* Update last_activity timestamp of the session token
* Check user backend credentials once in 5 minutes