default session settings was reverted to file.
- encrypted cookie requires additional libs, might be confusing for new users
- others who need it still will enabled it