rack session is persistent for 3600 seconds and should actually be persistent for browser sessions only