added refresh tag to redirect to login on session timeout