This is done already in `session_expiry`, where's it being called from that doesn't wrap in backup_session_content?  (The exception handler?)