Session lasts 30 days  ·  5 attempts before lockout