Sessions should timeout after 20 minutes automatically. What is your session time limit set to in your php.ini file?
There are some exceptions and caveats... look at this post on the topic, it may help:
http://stackoverflow.com/questions/520237/how-do-i-expire-a-php-session-after-30-minutes