Sessions last too long (SVE-624-2019-12)
The OWASP suggests a maximum session length of two to five minutes for critical applications.
Sequry currently allows/uses way longer session times.
Sequry should at least reduce the default QUIQQER session time from 14000 seconds to something aroung five to ten minutes