AuthQueries can differ for an API session

[andrewpmartinez]

Experienced

The authQuery property return on authentication and via GET /current-api-session will differ. The version returned during auth will have 0 auth queries, while the GET will always return EXT-JWT auth queries - even if the proper JWT was provided.

Expected
The auth query value from GET /current-api-session should not contain an EXT-JWT query if it was satisfied.

Reproduction

1. Create an auth policy that allows ext jwt authentication and turn on secondary authentication to require a JWT on every request
2. Authenticate via JWT, see API Session auth queries
3. Get the current API session w/ a valid JWT, inspect the auth queries