session.timeout setting made required