Session timeout for broker to re-acquire token before session expires

[rogalv]

Add a configurable timeout for login session: let broker obtain fresh tokens before they are considered obsolete by ecs, which will allow to avoid issues in some load-balanced configurations.