fix: Do not allow users to resume submitted or deleted sessions

[DafyddLlyr]

What's the problem?

• There's a fairly frequent Airbrake issue which this is aiming to address - https://planx.airbrake.io/projects/329753/groups/3916219583995941680/notices/3919131643095484184?tab=notice-list
• The /validate-session endpoint is getting called for sessions already submitted, and then throwing an error

What's the solution?

• Add a check for submitted and deleted sessions, which matches the public user permission set

What I think is causing this

• A user submits an application
• They then try to resume (either by refreshing, or via save and return)
• They are able to actually resume and hit the send component again which triggers this error
• You can try this out on staging to trigger this error (e.g. https://editor.planx.dev/buckinghamshire/report-a-potential-dangerous-structure/published)

Screen.Recording.2024-10-21.at.11.04.22.mov

This is now resolved on the Pizza, please see https://3828.planx.pizza/buckinghamshire/report-a-potential-dangerous-structure

Why I'm not totally convinced this is what users are doing

• The above seems like quite edge-case behaviour, but is happen fairly frequently, and usually a few minutes after submission
• Submissions are happening as expected however - Slack notifications, email_applications audit log, and Hasura events all seem to confirm this

[github-actions]

Removed vultr server and associated DNS entries

[jessicamcinchak]

Thanks again for looking into this one - agree it's very strange, and this fix is definitely in the right direction - curious to see if we'll still see it popup !