added expiration date to session cookies