set a 1 hour expiration on the http session