checks for session timeout + session lifetime set to 4h