Fix bug, response code for session out is 408, not 407