Refresh the session cookie only once it aged a bit