Added session_domain setting so sessions can work across subdomains
Added session_duration setting to control session expiry length