Your organization allows users to access Microsoft 365 from unmanaged personal devices via a web browser. Security requires that when users on unmanaged devices close their browser, they must re-authenticate, and their session must not persist. Managed devices should retain their normal session behavior. Which Conditional Access session control should you configure to meet the requirement for unmanaged devices?