added web.xml in order to select session timeout