validity of session tokens length of those tokens and expiration of session tokens while translating from ssl to non ssl