FIX: Do not check for suspicious login when impersonating. (#6534)

* FIX: Do not check for suspicious login when impersonating.

* DEV: Add 'impersonate' parameter to log_on_user.

spec/models/user_auth_token_spec.rb

@@ -283,4 +283,29 @@ describe UserAuthToken do
     expect(lookup.auth_token_seen).to eq(true)
   end
 
+  context "suspicious login" do
+
+    let(:user) { Fabricate(:user) }
+    let(:admin) { Fabricate(:admin) }
+
+    it "is not checked when generated for non-staff" do
+      UserAuthToken.generate!(user_id: user.id, staff: user.staff?)
+
+      expect(Jobs::SuspiciousLogin.jobs.size).to eq(0)
+    end
+
+    it "is checked when generated for staff" do
+      UserAuthToken.generate!(user_id: admin.id, staff: admin.staff?)
+
+      expect(Jobs::SuspiciousLogin.jobs.size).to eq(1)
+    end
+
+    it "is not checked when generated by impersonate" do
+      UserAuthToken.generate!(user_id: admin.id, staff: admin.staff?, impersonate: true)
+
+      expect(Jobs::SuspiciousLogin.jobs.size).to eq(0)
+    end
+
+  end
+
 end