changed session valid period to 2 weeks