changing session timeout to 4 hours