prioritized max-age over expires (RFC6265, 5.3.2)

When there is both a Max-Age and an Expires attribute, the Max-Age must be prioritized to define the expiration of the cookie (RFC6265, section 5.3.2). I fixed that and wrote a regression test. Best, Fabian