Fix web session timeout and 2FA timeout