added display_in_iframe to Message model
set session expiration to 24 hours