Update pam_script_ses_open to lock per $PAM_USER

This commit is intended to avoid duplicate mounts and
ensure that the pam login script is idempotent.