peak CPU in this case is associated with users opening their mail for the first time (following session timeout).
Since we were not able to control the session size, we resorted to increasing the available heap space (see the next section) while reducing the session timeout.