* User idle timeout

* Only allow one session per user at a time
* user 'timestamp' property -> 'account_created'
* Better User.getLegacySecurityLevel() using group membership
* Client connection management -> client_connections.js
* Minor changes & cleanup

core/config.js

@@ -145,6 +145,10 @@ function getDefaultConfig() {
 			*/
 		},
 
+		misc : {
+			idleLogoutSeconds	: 60 * 3,	//	3m
+		},
+
 		logging : {
 			level	: 'debug'
 		}