Session timeout defaults to 7200 seconds, or infinity if not configured in global config