Fix bugs in `extend_remember_period`

[nomis]

This is a modified version of https://github.com/heartcombo/devise/pull/5351 that fixes the remaining issues:

• Only extend remember_me if remember_me is currently active
• Set a timeout for extend_remember_period tests, otherwise the session doesn't expire so the user will never be logged out