fixed online users in rooms, added session_expire_at_browser_close setting