modify session timeout and sessin cookie timeout