Check code/securecode are set for login

Fixes #31.

If securecode is NULL (e.g. bad external log-in code) then any user from the
same IP can gain access if they don't have a securecode cookie set.