simplify query_session() expiry hit check
add more session expiration specs