I have two websites with self written membership providers that are hostet on the same server in the same Web in different web-applications and different application pools.
The cookie timeout is also limited by IIS and defaults to something low like 20 min. To change this: