Please note that session_set_cookie_params should not use the value of the lifespan set in the constructor because the sessioncookie is a trigger for the cleaning up using the lifespan AND timeout properties.
If the sessiontime is limited to the set lifespan this trigger will never occur since the sessioncookies will expire at exactly the same time...

If you buy this book than most of the expertise you gain from it will be the result of debugging.