It can be confusing to users that Box does not bring you back to your login page on session expiration, only after you try to complete an action. Suggest adding a notification to warn users they will be logged out in XX minutes due to inactivity. Alternatively, notify users they are logged out before they try to complete an action.