move gallery sessions below cookie info (#400)

Also properly hides cookie options if gallery sessions is checked.