start of clientside session timeout logic