custom decode passed to koa-session

https://github.com/onebook/koa-crypto-session/blob/master/index.js#L53-L55

``` js
// check if the cookie is expired
if (!json._expire) return null
if (json._expire < Date.now()) return null
```

this should be done by `koa-session`
