Session timeout: 30 minutes of inactivity.