set the new session handler as session handler configure session with longer lifetime and with stricter cookie settings