added cookie timeout