added session timeout docs