fix: koa-session don't support key start with '_'

@see https://github.com/koajs/session/blob/master/index.js#L150