update pam config to use common-session