moved timeout from session initialization to when a request is executed