added session expire to /auth response
changed expire