keep the session cookie for 60 minutes (bug 940621)