Security update: User does not have to reauthenticate if they last used the app less than an hour ago - even if cookie is old