WebSession: better collect_user_info SSO support
WebSession: better collect_user_info SSO support

* When collect_user_info() discovers that a user has not logged
  in since a while (now set to 1 hour, before 1 day), and we are
  using SSO, then we shall force resynchronization only if HTTPS.

inveniosoftware/invenio,inveniosoftware/invenio,tiborsimko/invenio,tiborsimko/invenio