Increase the web session timeout from 60 minutes to 300 minutes

Usability and security testing have shown that XSRF time out is annoying people in the wild.

The security guy (Vitaly) has ok'ed the limit to be increased.

This has been done on trunk (along with other changes) and should be done on 4.3 branch as well.