Adds session timeout

closes issue #92

The configured session timeout is 15 minutes, but we should probably talk about
what really makes sense here.