added php session regeneration and expiry code

also removed REMEMBER ME option which was never actually implemented for
security reasons.