I'm trying to figure out how/when an authentication attempt ever expires? If I authenticate once, what prevents me from always being authenticated