app & session timeouts (typo)