Add absoluteAuthTimeout to yii\web\User.

This is based on the code from Yii 1.1.14 by Ivo Kund.
update changelog for 4317