Interpret `api.session.timeout` as seconds, not hours
Interpret `api.session.timeout` as seconds, not hours

This config value _used_ to be defined in hours, but now is defined in
seconds.  The BOSH release has been updated to match, but that causes
sessions to expire by a factor of x3600 later than one would expect.

Fixes #643

starkandwayne/shield,starkandwayne/shield,starkandwayne/shield,starkandwayne/shield,starkandwayne/shield