Try umask(0) before session_start(). There are better ways of doing this with setacl on the folder.
umask(0)
session_start()
setacl