fix: koa-session don't support key start with '_'

@see https://github.com/koajs/session/blob/master/index.js#L150
Merge pull request #5 from koajs/cookie-session-hotfix

fix: koa-session don't support key start with '_'