change session timeout to 5 minutes