When using FBA, session timeout is determined in the
web.config. This is a standard feature of asp.net.
Example:
<forms loginUrl="/_layouts/login.aspx" timeout="30" />
(timeout is in minutes).
Setting the timeout in Central Admin will have no effect on Forms
authenticated sites.