do you have xpack.security.sessionTimeout set in your kibana.yml? Also, what do you have set for xpack.security.authc.providers or xpack.security.authProviders ?Do you happen to have multiple "tabs" open for Kibana in the same browser?
more discussed here : SESSION_EXPIRED while login kibana in similar threads
Thanks
Rashmi