minor cleanup

auth/sessions.go

@@ -319,8 +319,8 @@ func (sm *SessionManager) update(id string, s *Session) error {
 	if !ok {
 		return errors.New("session not found.")
 	}
-	s.secret = old.secret
 	s.id = old.id
+	s.secret = old.secret
 	s.state = old.state
 	s.ctx = old.ctx
 	s.cancel = old.cancel