Login issue

All the auth_tkt tokens are appended to cookie if you don't logout. It affects only the developer site (in production you can not login twice because the database is always the same).

Need to rewrite session on new login (not append)
