Fix parsing of 'ttl' parameter in admin REST _session API

Was being interpreted as nanoseconds, not seconds…
Fixes #69