Description of problem:

endless authentication session should be disallowed as it a subject for
potential security breaches and resources leak if client does not close
it at the end.