UP-3717 - session timeout

Non-final public `class` so consider making the `logger` `protected` so as to be available to potential future sub-classes.