where can i configure the session timeout?
in your web.xml.
assuming you are using tomcat check the documentation:
according to this link:
<session-config> <!-- HTTP Session timeout, in minutes --> <session-timeout>30</session-timeout> </session-config>