handling user form errors
adding session timeout configuration