update session timeout handling