update session timeout to 5 mins