changed default behavior of SESSION_EXPIRATION setting