Session times out after 20 minutes of inactivity.