Do you expect to refresh the page and see the login page again? If so, then not how the timeout works. If you expect it to present you with the login page during the upgrade, remove the timeout part from your model and put NOT development.rb in devise.rb. Remember to restart the rails server.
config.timeout_in = 1.hour
All of this is described in the wiki here .
Also, am I not sure about the logic in 10 seconds? Seems too short. If it still does not work, increase (for example) five minutes and check.
source share