changed session timeout to 15 minutes