added a session expiry date to the security cookie
removed unnecessary character
deserialization works now