As discussed, expires is after last request. (which also matches the behavior when setting the cookie)