Added configuration option to set session timeout: admin/config/people/accounts