refine messages slightly around session timeout