added default timeout for session expiry middlware