more reliable session lifetime

- allow only integer value for session ttl
- disable session lifetime for ttl < 5 min
- added hint to settings