I have updated the session pool time out value in the ...\online\webAPI web config file to the below.  Restarted the default website as well as the application pools but I continue to get logged out at 20 min.   is there some other place where this needs to be set?

This is my Pool Configuration settings section of the web config.

<!-- ====== START: Pool configuration settings. ====== -->
<!-- Whether session pool is enabled or not. For web application and webapi it should be true. For worker role it should be set to false. -->
<add key="SessionPoolEnabled" value="true" />
<!-- Increasing the MaxSessionPoolSize will improve performance when handling multiple requests on the same session but will use more resources -->
<add key="MaxSessionPoolSize" value="2" />
<add key="CloseViewsBeforeReturningSessionToPool" value="true" />
<!-- Maximum number of concurrent sessions allowed per user. If it is -1, then no restrictions. For web api, it should be 100. -->
<add key="MaxAllowedSessions" value="100" />
<!-- Session (if it exists) will be released from the pool based on this timeout (inactivity). -->
<add key="SessionPoolTimeOut" value="120" />
<!-- ====== END: Pool configuration settings. ====== -->