title: Session timeout using Membership of ASP.Net in prod, not in dev environment
body: <p>When I login to my webform in my production environment ( IIS 7.5 + SQL Server 2008), my session expires after just a few couple of seconds (less than 1 minute).
  But when I do the same in my dev environment (ASP.Net Development Server + SQL Server 2008) the session is persistant long enough... (several minutes).
  I use the ASP.Net membership technology with Forms authentication mode and try to use Cookies.
  It look like something on the server is overriding my parameters, but I don't have access to the production IIS configuration (I subscribed to a shared hosting)</p>
  
  <p>Here are my web.config parmeters:</p>
  
  <pre><code>  &lt;system.web&gt;
      &lt;compilation debug="true" targetFramework="4.0"&gt;
        &lt;assemblies&gt;
          &lt;add assembly="System.Data.Entity, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" /&gt;
        &lt;/assemblies&gt;
      &lt;/compilation&gt;
      &lt;authentication mode="Forms"&gt;
        &lt;forms loginUrl="~/Pages/Front/Login.aspx"
               protection="All"
               timeout="900"
               path="/"
               requireSSL="false"
               slidingExpiration="true"
               defaultUrl="~/Pages/Front"
               cookieless="UseCookies"
               name="MySite" /&gt;
      &lt;/authentication&gt;
      &lt;membership defaultProvider="AspNetSqlMembershipProvider"&gt;
        &lt;providers&gt;
          &lt;clear /&gt;
          &lt;add name="AspNetSqlMembershipProvider"
               type="System.Web.Security.SqlMembershipProvider, System.Web, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
               connectionStringName="XXX"
               enablePasswordRetrieval="false"
               enablePasswordReset="true"
               requiresQuestionAndAnswer="true"
               applicationName="/"
               requiresUniqueEmail="false"
               passwordFormat="Hashed"
               maxInvalidPasswordAttempts="5"
               minRequiredPasswordLength="5"
               minRequiredNonalphanumericCharacters="0"
               passwordAttemptWindow="10"
               passwordStrengthRegularExpression=""/&gt;
        &lt;/providers&gt;
      &lt;/membership&gt;
      &lt;roleManager enabled="true"
                   cookieName="booble.com"
                   cookieProtection="All"
                   cookieSlidingExpiration="true"
                   cookieTimeout="90"
                   createPersistentCookie="true"
                   cookieRequireSSL="false"&gt;
        &lt;providers&gt;
          &lt;clear /&gt;
          &lt;add name="AspNetSqlRoleProvider" type="System.Web.Security.SqlRoleProvider" connectionStringName="XXX" applicationName="/" /&gt;
          &lt;!--&lt;add name="AspNetWindowsTokenRoleProvider" type="System.Web.Security.WindowsTokenRoleProvider" applicationName="/" /&gt;--&gt;
        &lt;/providers&gt;
      &lt;/roleManager&gt;
      &lt;sessionState timeout="90" /&gt;
      &lt;customErrors defaultRedirect="Error.aspx" mode="On" redirectMode="ResponseRewrite" &gt;
        &lt;error statusCode="404" redirect="Error404.aspx"/&gt;
      &lt;/customErrors&gt;
      &lt;!-- needed because of my Provider--&gt;
      &lt;pages enableViewStateMac="false" /&gt;
      &lt;siteMap enabled="true" defaultProvider="AspNetXmlSiteMapProvider"&gt;
        &lt;providers&gt;
          &lt;clear /&gt;
          &lt;add siteMapFile="Web.sitemap" name="AspNetXmlSiteMapProvider"
              type="System.Web.XmlSiteMapProvider, System.Web,  Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
                  securityTrimmingEnabled="true" /&gt;
        &lt;/providers&gt;
      &lt;/siteMap&gt;
  
    &lt;/system.web&gt;
  </code></pre>
  
  <p>Thanks a LOT in advance for your answers !</p>