1👍
You should do request.session.set_expiry()
instead of on member of request.session[m.id]
.
The request.session
identified only current session along with user for the current request not all users logged in.
Hope you are gone through django sessions doc.
Source:stackexchange.com