Show a session expired message and redirect to login instead of "Method Not Allowed"

Expired sessions now show a clear message and redirect to login instead of cryptic "Method Not Allowed" errors.