let the session expire in 2 weeks