Increase session state timeout

The default timeout in ASP.Net is 20 minutes, so the cached access token
and refresh token were being cleared after 20 minutes, leaving no
opportunity to see the access token expire and the refresh token used to
get a new access token.