Remove the session on expiry, not the cookie