In force.com session timeout are handled by server sending a redirect and setting the location header to a page in force domain. This will cause a re-challenge and re-authentiation.
Is it possible to set what the location header is set to from the session timeout?
Or change the behaviour for session timeouts in any way?