CLDR-15744 make sure settings.user.touch() is called

- if the REST API is called for login instead of the older WebContext path,
the lastLogin may not get updated.

tools/cldr-apps/src/main/java/org/unicode/cldr/web/api/Auth.java

@@ -148,6 +148,7 @@ public Response login(
             session.settings().set(SurveyMain.PREF_COVLEV, null);
             LoginResponse resp = createLoginResponse(session);
             WebContext.setSessionCookie(hresp, resp.sessionId);
+            session.user.touch(); // update last logged in time
             return Response.ok().entity(resp).header(SESSION_HEADER, session.id).build();
         } catch (LogoutException ioe) {
             return Response.status(403, "Login Failed").build();