This is normally configured in the php.ini file. We do try to override this and set it to 2 hours but some servers don't allow this. There is a setting in php.ini called 'session_cache_expire' that controls this.

Due to the fact that we can't control this on all servers we've eliminated the need for this altogether for version 7.