Hi DonDowner,
di you try
‘auto_logout’ => true, ?
The manual says:
Enable or disable the automatic logout after session_lifetime, even if session keepalive is enabled. This will make sure
that an inactive browser will be logged out even if requests to the server might extend the session lifetime.
Hope, it helps.
Soyo