nat: session cleanup fix