System - Session state must be externalized #50

Setup rolling session. Set cookie max age to 60 minutes and check for
expired session every 10 minutes