version # and expiration must be updated in cookie and session every time