title: Is there a way to combine behavior of SESSION_EXPIRE_AT_BROWSER_CLOSE and SESSION_COOKIE_AGE
body: <p>For security reasons I set <a href="https://docs.djangoproject.com/en/dev/ref/settings/#std:setting-SESSION_EXPIRE_AT_BROWSER_CLOSE" rel="noreferrer">SESSION_EXPIRE_AT_BROWSER_CLOSE</a> to true.</p>
  
  <p>But, browser-length cookies (cookies that expire as soon as the user closes his or her browser) don't have a expire time, then <a href="https://docs.djangoproject.com/en/dev/ref/settings/#std:setting-SESSION_COOKIE_AGE" rel="noreferrer">SESSION_COOKIE_AGE</a> has no effects (Yes, I check it). But I want to set a logout/timeout on inactivity plus to logout on browse closing. </p>
  
  <p>My question is, <strong>What is the best way to implement inactivity timeout/logout in browser-length cookies scenario?</strong></p>