added session timeout 1 hour