Moved the session_start() block up in the config

this eliminates a session_start notice.