We have a classmate concerned about CC being left open on computers for extended amounts of time. Is it possible to "timeout" sessions after a certain amount of time for all users? I believe he sees this as a security issue.

What security concerns does your classmate have which warrant a session timeout?

I'm not in favor of a session timeout feature. Most sites with a session timeout feature are financial sites, wherein someone who accesses your computer without your knowledge could execute a nefarious financial transaction. It makes sense for these sites to have a session timeout feature.

Further, all the sensitive contact info on our sites is hidden from users, except for administrators. In my opinion, the classmate who is concerned should simply log out when he is finished, or close the tab for the class site. I'd also advise him to be sure the "Keep Me Logged In" box (visible when you log in) is unchecked, in case he has the site bookmarked.

Agree, Just close the browser. And change Keep Me Logged in.

I used to get so irritated when timeouts were 2 minutes or so. Takes me that long to remember why I'm here.