make sessions expire in 1 hour