Ensured that during update to 2.4 that default values are preserved. I.e. if the user never adjusted the default session lifetime it's probably safe to update them to the new default value of letting the cookie expire when the browser closes.