Don't assume frappe.app exists when checking session expiry

Session expiry checks no longer crash on requests fired before app boot.