fix(auth): refresh the user record on successful auth

This will ensure the state of `request.user` is good to go
for any other users which obtain it after the backend.

Signed-off-by: Kevin Morris <kevr@0cost.org>

aurweb/auth/__init__.py

@@ -122,6 +122,7 @@ class BasicAuthBackend(AuthenticationBackend):
         # exists, due to ForeignKey constraints in the schema upheld
         # by mysqlclient.
         user = db.query(User).filter(User.ID == record.UsersID).first()
+        db.refresh(user)
         user.nonce = util.make_nonce()
         user.authenticated = True