made session lifetime externally configurable