add expire to session id set to clear it out even if tomcat goes down