code: public void updateSessionType(String type) throws SecurityException {
  	checkWriteAccess();
  	boolean hasAccess = ConfigWebUtil.hasAccess(config, SecurityManager.TYPE_SETTING);
  	if (!hasAccess) throw new SecurityException("no access to update scope setting");
  
  	type = type.toLowerCase().trim();
  
  	Element scope = _getRootElement("scope");
  	scope.setAttribute("session-type", type);
      }
docs: session type update
  
  @param type
  @throws SecurityException