custom decode passed to koa-session

[haoxins]

https://github.com/onebook/koa-crypto-session/blob/master/index.js#L53-L55

// check if the cookie is expired
if (!json._expire) return null
if (json._expire < Date.now()) return null

this should be done by koa-session