session: add long expires check and prevent set-cookie
Release 2.7.4