tweaked: bumpt default expiration of sessions to 4 hours vice 1 hour.