bump sso timeout to 4 hours