session timeout

Fix bug where the timeout isn't properly checked (maybe something what was cached is retrieved?) One can also see whether its possible to get a pop up every 30 minutes after no call to the server has been done. There should be a solution at least