I need to limit the session lifetime for certain users.
The problem is, max_age is set when the middleware is created and it does not seem to be available to update after that.