Tested by manually expire the session cookie. You're right, thanks! :)