change session expiriny system from in model to in controller to allow for resuse of one header