implements max age in cookie session