remove param on login method
increase session timeout
remove param on login method