We now set the session timeout in global.asax