fix(ZNTA-634): change auth'd sessions timeout

The value set to authenticated sessions is the largest value between the
configured authenticated session timeout and the anonymous session
timeout.

zanata-war/src/main/java/org/zanata/ApplicationConfiguration.java

@@ -64,6 +64,8 @@
 import com.google.common.collect.Sets;
 import org.zanata.security.OpenIdLoginModule;
 
+import static java.lang.Math.max;
+
 @Name("applicationConfiguration")
 @Scope(ScopeType.APPLICATION)
 @Startup
@@ -422,7 +424,8 @@ public void setAuthenticatedSessionTimeout(
                 .getRequest()
                 .getSession()
                 .setMaxInactiveInterval(
-                        authenticatedSessionTimeoutMinutes * 60);
+                        max(authenticatedSessionTimeoutMinutes * 60,
+                                defaultAnonymousSessionTimeoutMinutes * 60));
     }
 
     @Observer(LogoutEvent.EVENT_NAME)