set sessions to expire after 1 hour of inactivity