Expired authentication credentials persist in Remix cookie sessions
The goal is to diagnose whether Remix automatically invalidates expired credentials within cookie-based sessions, or whether the application must enforce expiration in every loader and action. Remix supports cookie-based sessions with configurable lifetimes, but it is unclear whether the framework rejects a credential after it expires or only after the cooki