Three Ways Your Session Filter Gets Time Wrong (And the Permanent Fix)