add timestamp and expire; thumbnail use seperate session to prevent pool overflow