Fix: Expire sessions

Our sessions weren't expiring because we weren't
taking into account the fact that JSON doesn't
store Date objects and instead stores strings.

Now we convert the saved string back into a Date
when we load the session.