[stable30] fix: Do not set last-password-confirm for apptoken sessions

[stable30] fix: Do not set last-password-confirm for apptoken sessions #37112