we should be able to set a higher session timeout value, e.g. 24 hours.

it's okay to set this directly in a Tomcat config file instead of the GUI but it should be included in the admin section of the help.