Fix password_expirable not working coz of accessing warden's session key

See https://github.com/phatworx/devise_security_extension/issues/83

Look like between requests `warden.session(scope)` just return a hash which has all keys are in string instead of symbol.