I'm surprised that it doesn't? gorilla/sessions[1] does the same; and you can eventually remove your old keys provided you keep your expiry times sane. [1]: ht

I'm surprised that it doesn't? gorilla/sessions[1] does the same; and you can eventually remove your old keys provided you keep your expiry times sane. [1]: http://www.gorillatoolkit.org/pkg/sessions#NewCookieStore http://www.gorillatoolkit.org/pkg/sessions#NewCookieStore