I believe there is a scheduled task that does this cleanup for session and users. You might check the documentation on this setting. If there isn't a scheduled task, you can easily create one to clean them up. Maybe it runs every day or week or hour.