add timeoutable to user sessions