Fixed bug in auth.class

Session expiry date wouldn't be extended with user activity