Reviewer Mike - Session expires

This doesn't support handling `Min-SE` headers that are higher than 10 minutes since I need to write a whole header parser to handle that case.

Can you review this as is and I'll add the `Min-SE` support later?