Auth regression with session handling

[kevinansfield]

Issue Summary

There has been a regression in session handling since the switch to the adaptive-session-store that manifests itself in not fully logging out if the session is destroyed.

Issue is definitely noticeable when modifying sessions through Web Inspector but it may also be the cause of some recent session bug reports.

Steps to Reproduce

1. Log in to the admin area as usual
2. In Web Inspector, find the ghost:session key and delete it
3. Note that the key content is replaced with undefined
4. Select one of the posts
5. You're shown the login screen albeit with the sidebar still displayed

This is a bug because the session invalidated action should be called immediately when the session key is deleted, forcing a refresh and taking you to the login screen. Other session events may also be failing, preventing the display of the re-authenticate modal in certain circumstances.

Technical details

• Ghost Version: 0.7.5 and master

[acburdine]

This is (mainly) due to a bug in Ember-Simple-Auth that was fixed as of version 1.0.1