setup user sessions. need to find a way to configure it so the session expiry can be changed to a different length