remove :timedout from the session hash (https://github.com/plataformatec/devise/issues/1777)