get the global session at request start & cookie expiration