[#9] Set session cookie lifetime to two years and enforce https (need to figure out how to configure this with lighthttp)