Improper Session Handling

There are few cases related to Session Handling some are:

• Session is managing from backend or Server, For Example, If user signed out from the app so session is deleted from the devices but not deleting or expire from the Server.
• Session token timeout not set, it comes in Insecure Token Creation if develop not set token expiration time or set for long time valid session.