DisconnectUserSession will only consider session.timeout now