added sliding expiration for session cookies