GetCurrentAuthenticationTicket() should not mutate DB state

`AuthenticationTicketService.GetCurrentAuthenticationTicket()` should not mutate database state. Currently it deletes expired tickets and extends the expiry time. This quickly turns bad if an app (reasonably) assumes idempotency of `GetCurrentAuthenticationTicket()` and calls it during view model dirty checking.