add Session timeout control