changed session time out to 4 days