I understand that some oxwall users are concerned about a lack of inactivity session timeouts. I am not a coder by any means but this code seems to work for me. feel free to use:
In the admin menu --> Settings --> main settings --> page settings
Add the following to the "Custom head code" field:
<meta http-equiv="refresh" content="900;url=/oxw/sign-out" />
Note:The "900" in the string above is 60 seconds x 15 minutes you can adjust the time as you see fit.
Also, I currently have my installation in a subdirectory ("/oxw/") but you may be able to remove the subdirectory if you have it in the html root directory.
Caveat: be careful in testing this out by setting the timeout too low as I learned the hard way and set it to 5 seconds and I had to login and make the change before the session timed out :)