Add an optional 'expires' argument to GetSession() to allow longer expirations