upgraded ring and compojure
adding default session timeout and cookie max age
frame deny