fix: update last_login every 5min so profile shows current activity

before_request middleware refreshes last_login in session-throttled
manner (max once per 5 minutes) to avoid showing stale activity.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app.py

@@ -615,6 +615,31 @@ def check_geoip():
         abort(403)
 
 
+@app.before_request
+def update_last_active():
+    """Update last_login periodically (every 5 min) so profile shows fresh activity."""
+    if not current_user.is_authenticated:
+        return
+    if request.path.startswith('/static') or request.path == '/health':
+        return
+    from flask import session as flask_session
+    import time
+    now = time.time()
+    last_update = flask_session.get('_last_active_update', 0)
+    if now - last_update < 300:  # 5 minutes
+        return
+    flask_session['_last_active_update'] = now
+    try:
+        db = SessionLocal()
+        user = db.query(User).filter_by(id=current_user.id).first()
+        if user:
+            user.last_login = datetime.now()
+            db.commit()
+        db.close()
+    except Exception:
+        pass
+
+
 @app.before_request
 def track_page_view():
     """Track page views (excluding static files and API calls)"""