Do not apply session invalidation rules to basic auth requests

[jbarrett]

Description :

Do not apply session invalidation rules to basic auth requests since this can break duck workflow.

Reviewer notes :

References issues / PRs:

#

Who should be informed of this change?

Does this change have significant privacy, security, performance or deployment implications?

Checklist :

• [ ] Back end tests (perl, scripts)
• [ ] Front end tests (js, integration)
• Browser verification
  • [ ] IE
  • [ ] Chrome
  • [ ] Firefox
  • [ ] Safari
  • [ ] Opera
• Mobile verification
  • [ ] iOS
  • [ ] Android

[MariagraziaAlastra]

LGTM! Tested using this, for future reference