Implement cowboy-style session expiry