do not update session expiration unless it will move forward in time
do not update session expiration unless it will move forward in time

If a session has been given a longer expiration time, the default
calculation of now+duration would cause it to go backwards.

informatics-isi-edu/webauthn,informatics-isi-edu/webauthn,informatics-isi-edu/webauthn