Session Management in SharePoint 2013

Hi,

I want to implement Session Management for SharePoint 2013 web application. I'm facing two issues :-

1) When we tried logging out of the application and tried to access the page again the session still persist and the page is accessible without asking any kind of authentication. How to manage this ?

2) How to configure the session timeout i.e. even after few hours of inactivity the session was still accessible. ?

Vipul Jain