- session will timeout by 30 mins now
- setting account to OFFLINE if session will be destroyed
- fixed nullpointer when locating account