fix: 🐛 Fix session settings

Advised to be used together with the following properties:

server.servlet.session:
  # inactivity time before session expires
  timeout: 60m 
  cookie:
    http-only: true
    secure: true