To add/change the default session timeout:
<timeouts>
<session>
<!-- Session inactivity mins before session is closed -->
<inactivity>60</inactivity>
<!-- Session maximum mins before session is closed -->
<maximum>600</maximum>