[IMP] http: Sessions implicit deactivation

- Store a token inside sessions to allow implicit session deactivation when needed.

backport of @da1f153d61d747d9357694382fe04f96c0ca886a @c8243e71c6da37547a19f61c58f25d5d03e13d38

addons/auth_crypt/auth_crypt.py

@@ -3,6 +3,7 @@ import logging
 from passlib.context import CryptContext
 
 import openerp
+from openerp import api
 from openerp.osv import fields, osv
 
 from openerp.addons.base.res import res_users
@@ -95,3 +96,7 @@ class res_users(osv.osv):
         internally
         """
         return default_crypt_context
+
+    @api.model
+    def _get_session_token_fields(self):
+        return super(res_users, self)._get_session_token_fields() | {'password_crypt'}