tweaking timeout and error messages for validate session