automatically touch the auth session on each request