Allow expired sessions for passive auth guard

Merge request reports

Loading