admin settings UI: add session lifetime