Richard,

5 secs. for <session_timeout_millis> is usually more than enough, as it should be higher than the typical Internet round-trip time.

As explained in the other thread you mentioned, you probably have some other issue, which is unrelated to both the <content-length> and the <session_timeout_millis>.

Cheers,

Alessandro