Reducing the number of false positives.

[RyanPaiva56]

I use a redis session driver (if that matters) and my users are getting tons of false-positive emails saying they logged in with a new device. When looking at the code, it looks like it checks if the user has a changed IP or user agent. Unfortunately, IP addresses change frequently and it looks like the 'new user' event is triggered even when the user is already logged in.

The solution looks like:

1. Some kind of long-lived session variable for device_id that gets stored in the db and checked instead of IP address or user agent.

-or-

2. To use a different event that is only for when a user goes from being logged out to logged in, instead of triggering when users return to the site.