Some further refactoring of login done.
Moved LAST-ACCES to USER-SESSION instead of USER class.