Hi I have recently edited my session-timeout within web.xml (instead setting it to one minute for testing purposes), but it only had an effect after I have deleted my cookie within the browser. I am not sure if this is a feature or a bug, but it might be good to know anyhow. Cheers Michael