Thanks Jason.
I followed your instructions, but it is not working properly.
It is still allowing me to use log in details with an expired date, and also when I click 'logout' - I am able to access the site and place orders (although there are no session variables active) and it doesn't return me to the log in page.