Make sure identity expiry time is bumped every time a page is requested.

This just requires saving identity after setting cookie instead of before.
Add an extra safety check around running supervisorctl when deploying