Serialize session data by serializer.
String joining make a bug if user uses hmac_function, returns the data contains ':' character.