Session: usability improvements to timeout message

Changes requested in #3190:

1. Simplified session timeout message to make it easier to understand.
2. Increased default inactivity time to 3 minutes.