added default session timeout