Changed session timeout to 20 minutes if keep-me-logged-in is not checked.