title: Random session Timeout
body: <p>We have been using ZK framework. The session timeout set in web.xml is 60 minutes and in zk.xml it is set to default 0. That is (according to my knowledge) it will use the timeout configured in web.xml. The issue that we face these days is that session of the user expires randomly. The browser shows the message - Your session has expired. On clicking on OK, it redirects to login page which is configured in  in zk.xml. Many times the session doesn't get killed on server but the browser shows that session has expired and even it does not redirect to login page. Also the popup of session expiration keeps on coming. </p>
  
  <p>So these are the two scenarios in which the user faces random session timeout:
  1) When session is destroyed on server
  2) Session is not destroyed on server and page is not redirected to login page.</p>
  
  <p>We are using spring security 3. There is no code that explicitly fires logout in our application. Also session management is handled by cookies only.</p>
  
  <p>Please suggest anything that pops up in mind..</p>
  
  <p>Any help is appreciated. Thanks in advance..</p>