Added settings defaults
Added sessions harvesting + cookie maxAge
Util cleanup
Added permissions