update session timeout