add manage of session timeout