v0.2.6

• upgrade built-in session middleware
  • upgrade lua-resty-session to v2.13
  • add a new param timeout to set session/cookie timeout, default is 3600 seconds
  • add a new param refresh_cookie which indicates whether to refresh cookie & session expire time when new request is coming, default is true
• enhance lord new cli
  • make app module cache to optimize runtime performance
  • refactor CRUD example, see more in app/routes/user.lua
• remove default X-Powered-By header