added session timeout management