added session_limit instead of hardcoding the minute limit