Pass expanded identity list to the AuthenticationSession
    
    ... otherwise it things like admin-identities being set to
    ["unix-group:session"] won't work.
    
    Signed-off-by: David Zeuthen <davidz@redhat.com>