feat: session support improvements

[pi0]

• Support maxAge to expire sessions
  • Stored new session.createdAt
  • Cookie expiration time is based on createdAt + maxAge Note: Cookies are session-only be default and removed after browser closed unless setting ttl
  • Sealing uses maxAge
  • Unseal operaion (double) checks age
• Invalid/Expired sessions are silently dropped and renewed
• Exposed new sealSession (useful for generating tokens) / unsealSessin
• Header based auth support (default header is x-{name}-session / x-h3-session)
• Cookie can be disabled with cookie: false

Overall this provides a more stable session support, header authorization and expiration feature.

[codecov]

Codecov Report

Merging #325 (c0b962b) into main (a4b6f0d) will decrease coverage by 2.34%.
The diff coverage is 11.11%.

@@            Coverage Diff             @@
##             main     #325      +/-   ##
==========================================
- Coverage   73.16%   70.82%   -2.34%     
==========================================
  Files          22       22              
  Lines        1904     1981      +77     
  Branches      289      289              
==========================================
+ Hits         1393     1403      +10     
- Misses        511      578      +67     

Impacted Files	Coverage Δ
src/utils/session.ts	21.96% <11.11%> (-5.05%)	⬇️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.