Session: split timeout message into 2 strings

* Removed HTML markup from the strings.
* This allows the updated timeout message to work in 3.x and 4.0.

Discussion for change is in #3255.

@pjackson28 if you're good with this change, I'll update the other language translations and the Google Doc.