Tests: ssl_session_timeout fixes. The directive is moved to a distinct server block to avoid unexpected expirations. Actually provide SSL session (broken in c6f27bcdd9d9).