updated paths in session fixation and session inactivity features;