simplify session cookie options

It feels like all the session options are getting messy. Might be better just to pass evyerhtong through to cookie-session.