added a time limit on session and cleaned up the add user form