Thats for sure developer or user are not closing sessions. Though you can implement DCD (Dead Connection Detection).Oracle recommends a value of approximately 10 (minutes) for the SQLNET.EXPIRE_TIME parameter. If it is not specified, or set to 0, then broken connections may be maintained indefinitely.

HTH