Set min/max default session lifetime via config

Added the settings `<max_lifetime>` and `<min_lifetime>` to the config as we're running a shop where we're going beyond the default max lifetime of 30 days (`const MAX_LIFETIME = 2592000; /* Redis backend limit */`). Would make sense to override via config.