What information on user accounts is important enough to warrant session timeouts anyway?
Don't get me wrong I'm all for implementing necessary security features, but I don't see how a normal user account holds any sensitive information or any other information of value. If you're worried about...