fix(middleware): sliding expiration for remember-me sessions

[Copilot]

SessionIdleTimeout updated SessionLastActivity in the remember-me branch but never called session.Save(), so the cookie expiration never actually slid—only the in-memory value changed.

Changes

• SessionIdleTimeout — add session.Save() after updating SessionLastActivity in the remember-me branch, so the cookie is rewritten on every request

if session.Get(SessionRememberMe) != nil {
    session.Set(SessionLastActivity, time.Now().Unix())
    _ = session.Save()   // ← was missing; cookie now actually slides
    c.Next()
    return
}

• TestSessionIdleTimeout_RememberMeUpdatesLastActivity — assert Set-Cookie is present in the response, verifying session.Save() was called (not just the in-memory value)

---

⌨️ Start Copilot coding agent tasks without leaving your editor — available in VS Code, Visual Studio, JetBrains IDEs and Eclipse.

[Copilot]

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• invalid-host
  • Triggering command: /tmp/go-build665402482/b001/middleware.test /tmp/go-build665402482/b001/middleware.test -test.testlogfile=/tmp/go-build665402482/b001/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true om/gin-gonic/gin-p cgo_.o ux-amd64/pkg/tool/linux_amd64/compile -I /home/REDACTED/go/env -I ux-amd64/pkg/tooGO111MODULE -W om/mattn/go-sqliGOINSECURE ernal/profile/encode.go ux-amd64/pkg/tool/linux_amd64/compile . om/mattn/go-sqli-m64 --64 ux-amd64/pkg/too/tmp/go-link-828296822/a.out (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)