cakephp: expired session cookie after removing csrf token

This is a (multiple allowed):

• bug
• enhancement
• feature-discussion (RFC)
• CakePHP Version: cake 3.3.3

What you did

expired cookie session after close/ re-open browser i first login in site then closed browser and see again site after open that site ,see i still logged in site but in response header cake sent expire cookie header then i refresh page, and i see am logout from site this is happend after upgrade from cake 3.2 to cake 3.3.3 also if i loggen again until i not closed browser ,my cookie not expire and work well

//
app.php
    'Session' => [
        'defaults' => 'cake',
        'timeout'=>60*24*365,
         'ini' => [
        'session.cookie_lifetime' => 60*60*24*365,
        ]
    ],
//app controller
    public function initialize()
    {
        parent::initialize();

        $this->loadComponent('RequestHandler');
        $this->loadComponent('Flash');
        $this->loadComponent('Security');
         $this->loadComponent('Csrf');
         //$this->request->session()->renew();

                $this->loadComponent('Auth', [
..
'storage'=>['className' => 'Session', 'key' => 'Auth.User']
]);

Expected Behavior

Actual Behavior