session timeout improvements