When a session expires rather than make the user go to the login page, use AJAX to disable the page and open a window inside the page that allows them to re-enter their password or to cancel out. This way a user is least disrupted if they time out for whatever reason.