Add SSL session timeout (per http://nginx.org/en/docs/http/configuring_https_servers.html)