make session timeout configurable and set it to 1 hour
implement shopping cart