Updated defaults to match Debian's PHP

The session.save_handler and session.gc_maxlifetime are already correct from the defaults, but I'm explicitly setting them here so the garbage collection is more likely to keep working.  Using session.save_path=/var/lib/php5 is recommended since it is not world-readable, already owned by www-data, and is the default for other PHP SAPIs.