How to reply Session-Timeout without password