set session expiration time to 1 month