Currently the UI session timeout is hardcoded. This must be changeable - at least on a global scale.
This has been already done. The global session timeout can be set under the admin UI in the system settings. *** This bug has been marked as a duplicate of bug 857438 ***