session life time is now configurable and set to the same value