don't set a Session-Timeout if the rate is 0