hi,
is there a way/hack to do either (or both) of the following:

1) auto log user off after certain period of innactivity so that user does not stayed logged in all day long?

2) auto expire and prompt for new password to ensure that users are changing their password say every 60-90 days?

Any help would be greatly appreciated- thanks!