added ssl_session_timeout as vhost parameter