adding default session timeout and cookie max age