[HttpFoundation] allow different lifetime per session