[Auth] Allow forcing re-authentication

[lonnieezell]

Sensitive areas of sites should often require a user to re-authenticate if they were logged in automatically, like through a Remember-Me, or a long session. We need a way to force that to happen.