Add ability to set a session.expires value in app.conf

String in format suitable for time.ParseDuration

	modified:   session.go