The facebook is the one who handles the expiration of authentication in the facebook
.
What you can control in your rails applicaitons is how devise will expire your authentication. When this happen the user will be prompted to login in facebook again, if it is already logged then he will be redirected authenticated back to your page.
So what you have to control is your settings in devise.
If you want to access the facebook graph, here is a good tutorial to do that:
Facebook Integration With Omniauth and Devise on Rails 3
Regards, Felipe Lopes.