changing the session timeout