I use in core.php for logout after 30 minutes this:
Configure::write(\'Session\', array( \'defaults\' => \'php\', \'timeout\' => 30,
This could also be an issue with php settings.
There is an SO answer here that details how to get around this:
https://stackoverflow.com/a/3585057/1291499