change session timeout to one week