Re: session timeout
It would probably be the session configured by the webserver. Although if you use the remember me option, and then you MUST check the Remember Me checkbox on the login form. That works by sending a cookie to the browser.
I use remember me and have cookies set to a week without any problems using clients Mozilla and Firefox.