fix(plugin-auth): rotate the caller's bearer on impersonation, and recover the admin via bearer on exit (#8243)

fix(plugin-auth): rotate the caller's bearer on impersonation, and recover the admin via bearer on exit (#8243) #2407