session-timeout - no client-id