updated cookie session timeout to 1 hour