Comment From: pivotal-cla

@srivatsa-cfp Please sign the Contributor License Agreement!

Click here to manually synchronize the status of this Pull Request.

See the FAQ for frequently asked questions.

Comment From: pivotal-cla

@srivatsa-cfp Thank you for signing the Contributor License Agreement!

Comment From: wilkinsona

Thanks for the suggestion. Each web server factory contains logic for handling null as well as negative and zero durations. Preventing the duration from being set to a negative value would result in the session timeout remaining at its default value. This would be a breaking change so I don't think it should be made.