source: http://stackoverflow.com/questions/2960764/how-to-set-session-timeout-dynamically-in-java-web-applications http://stackoverflow.com/questions/1026846/how-to-redirect-to-login-page-when-session-is-expired-in-java-web-application