use timestamp validation to make sure sessions(visits) are counted correctly - do not rely on cookie timeout alone