change session expiry to 1 hour