deprecate 0.5.0, add session_timeout param

This commit was sponsored by The Hoodie Firm
with support from NLnet: http://nlnet.nl
http://go.hood.ie/thehoodiefirm