Session Cookie not setting correctly

Nobody has claimed this yet.

I'm trying the example with the following cookie store:

```
store := sessions.NewCookieStore([]byte(os.Getenv("SESSION_SECRET")))
store.MaxAge(86400 * 30)
store.Options.Domain = ""
store.Options.SameSite = http.SameSiteLaxMode
store.Options.Path = "/"
store.Options.HttpOnly = true // HttpOnly should always be enabled
store.Options.Secure = false

gothic.Store = store
```

I can successfully log in with the provider, but the response shows two `Set-Cookie` headers for `_gothic_session`, one that looks correct, the other which is much shorter, but expires in 1970. The one that expires in 1970 appears second, and I believe is not allowing the correct cookie to be stored in the browser.

Has anyone seen something similar to this before?

Start by reproducing the example configuration and inspecting the response's Set-Cookie headers, especially the second cookie that expires in 1970. Done means the login response emits a valid session cookie that the browser stores and uses successfully.

Written by the indexing model from the issue text.