sessions with expiration of 0 ignored by cleanup. fixes #22