[otrs] no session timout or alternative authentication?