gracefully handle current_user that does not respond to #auto_timeout
add tests for auto session timeout helper
use Ruby 1.9 hash syntax