log the user out (send them to login) when the session timeout is reached