Controlling session timeouts in the Portal