changed cookie expiry to 2hrs