In both 1.38a and 1.39a, the default tpl_time_out_default.php file has this:
Code:
<div id="timeoutDefaultContent" class="content"><?php echo TEXT_INFORMATION; ?></div>
<?php echo zen_draw_form('login', zen_href_link(FILENAME_LOGIN, 'action=process', 'SSL')); ?>
to define the form for the page. Shouldn't the form's processing be sent to the time_out page (it's fully capable!):
Code:
<div id="timeoutDefaultContent" class="content"><?php echo TEXT_INFORMATION; ?></div>
<?php echo zen_draw_form('login', zen_href_link(FILENAME_TIME_OUT, 'action=process', 'SSL')); ?>