Storing Session expiration in database instead of cookie