differentiate / and /home for security in session timeout