updated session timeout to -1. This means never expire