inform session timeout when get credential