extend user sessions on API activity

[mgwalker]

This pull request changes...

• extends a users's backend session on every API access
• closes Backend sessions are never extended #1728

This pull request is ready to merge when...

• Tests have been updated (and all tests are passing)
• This code has been reviewed by someone other than the original author
• Changelog is updated as appropriate

This feature is done when...

• Product has approved the experience
  This one is tricky to test because a backend session is valid for 48 hours at a time. I guess if you log in on Monday, then open the site on Tuesday and Wednesday, if you're still logged in on Thursday, it worked!

[cms-eapd-bot]

This deploy was cleaned up.

[jeromeleecms]

Logged in on 07/30. Will try to login on 07/31 and 08/01. Will try and report back on 08/02.

[jeromeleecms]

@mgwalker Logged in on 07/30 - returned on 08/01 to site, but was logged out of the system. That seems to be the expected behavior based on our time out settings. I'm not sure how to verify that's the right behavior that I'm actually extending the API backend?

[hbillings]

okay stretch armstrong

[mgwalker]

@jeromeleecms The way to test it is to login and note the time. Then in less than 48 hours, open it up - that should extend your session. Finally, just over 48 hours after you initially logged in (but less than 48 hours after you visited the second time!), open it again. If you're still logged in, it worked! If you're not... then it didn't... :sadface:

[hbillings]

What do we need to do to close this one?

[mgwalker]

@hbillings I think we couldn't test it because of #1756. I'm pretty confident this does what it's supposed to, but we can't be sure yet. I'm content to merge it now and double-check when #1756 goes in, though. What do you think, @jeromeleecms?

[jeromeleecms]

Good to go, no great way to test this, but doesn't break the app!