default session set to 10 minutes