public function is_valid($lifetime = null, $now = null)
    {
        if (null === $now) $now = time();
        if (null === $lifetime) $lifetime = ini_get('session.gc_maxlifetime');

        return (int) $now - $this->_time < (int) $lifetime;
    }