get should not return a session if it has already expired