Added ability to update timeout of session, added update of TTL of a session object if session not dirty, improved cookie to be safer according to OWasp recommendations (secure and httponly flags)