The system timeout previously was hard-coded to be 20 minutes; this is now a configurable setting and the System Administrator can set this in the Security Settings step.  The setting you choose will apply across your whole site.