fix(session): reject asymmetric JWT algorithms the built-in serializer cannot sign

fix(session): reject asymmetric JWT algorithms the built-in serializer cannot sign #133