WebSession: login_method changes

* Is more gentle when login_methods are altered on an existing
  installation (e.g. by falling back to the default login method
  if the settings of a user specify a no longer existing login_method).

Reviewed-by: Tibor Simko <tibor.simko@cern.ch>