As the session data is stored, it should be cleared out if the session has expired. Then the user will need to login again.