The server is allowed to keep the counter after the session has expired,
which allows a final ack to know wheter in-transit stanzas were
delivered or not.
Assuming received_features_node() is what triggers another attempt to
authenticate, this should prevent an attempt to XEP-0198 resume again
using the same session id.