CLC-4138 Fix view-as and reauthentication

https://jira.ets.berkeley.edu/jira/browse/CLC-4138

Blocker for all work on calcentral-dev.

I'll add a SessionsController test as a JIRA task later.