issue: #15824

Steps to reproduce the issue

• Install Joomla 3.7 (or 3.7.1-dev)
• Create a menu link with Access set to Registered (e.g. /test)
• Enable System - Language Filter plugin (required for multi-lingual sites)
• Login on frontend with "Remember me" checkbox ticked
• Wait 15 minutes for session to expire ;) (not really, just remove your session cookie, or delete the session record from #__session table)
• Visit the protected page (e.g. /en/test)

Expected result

You should be automatically logged in and land on open protected page.

Actual result

You are redirected to frontpage with message:
Error: You are not authorised to view this resource.
If your homepage requires access then you end up on 403 page.

System information (as much as possible)

What happens is that the language filter plugin builds the menu with access levels before the remember plugin had a chance to login the user. The menu is built with access levels of the guest user and updates only on refresh. So, on first visit, after the session expires, the menu thinks it's a guest and denies the access.

The quick fix is to re-build the menu after the remember plugin has logged in the user.
Here is the Gist, line 66: https://gist.github.com/sakicnet/f2b8e2486011093d08e544423d8e5124

Additional comments