Invalid expiry when maxAge is set and touchAfter is disabled

[tlo-johnson]

Setting cookie.maxAge and disabling touchAfter results in incorrect session expiry date.

Looks like it boils down to this line of code where maxAge should be added to the expiry.

[hoangvvo]

Thanks for pointing out, this is definitely a bug (a big one) and will be fixed in #283.

[hoangvvo]

Fix released in 3.4.0

[tlo-johnson]

brilliant!! thx