code: private boolean hasTimedOut(BackedSession d, long now) {
          boolean timedOut = false;
          int timeout = d.getMaxInactiveInterval();
  
          //Zero means we just read the session from database
          if (timeout > 0) {
              long lastTouch = d.getCurrentAccessTime();
              long invalidLastTouch = now - (1000 * (long) timeout);//PK90548
  
              if (lastTouch <= invalidLastTouch) {
                  timedOut = true;
              }
          }
  
          return timedOut;
      }
docs: /*
  hasTimedOut - check if given session has timed out