Sessions are still in the database if someone doesn't logout but you can check the date/time the session was last changed to get a better idea if its still active. Again if you want something more precise you should looking to adding analytics software.