Encrypted, expiring session data with integrity