closes #606 by adding ability for user to change session timeout