update cookie session module and control session cookie and timeout