It is probably better to add a timeout meta tag to the page with about the
same timeframe as website timeout, that automatically sends them to a
"session timed out" page, which also kills their session. If you do this,
make sure they cannot hit the back button from this page, however, or they
will try to be sneaky and go back to the form, which will not work.

If you go this route, have a link to logon page. If they have "remember me",
you can authenticate them on that page and automatically kick them out to
the default page, or similar.

If you really want a programming task, there are ways of setting up an error
handler to grab all elements on the page. Temp store them in some form of
cache (session?) and boot "remember me" users back to the page. Understand,
however, that this will require extensive programming. I would not think it
would be worth it in most instances.

*************************************************