add session-timeout directive
Merge pull request #1 from octanner/session-timeout

add session-timeout directive