Thanks, I can add one. It's incase the `value` fails to unpack or `renewed` is not a number. I had to add that check because in the `BaseCookieSessionFactory` there is no guarantee that the value was generated from our session because there is no signing to prevent tampering.