There was no such thing as a session.timeout, so it was being ignored.
The timeout has to be set on each request, so add helper funcs to always
add a timeout value.