- change cookie timeout to 2 hours, and display error message when user log in