Checking logged in user against server and not against cookie.

You cannot trust a cookie.

The dark side has cookies.
Merge branch 'geocat_trunk' of github.com:camptocamp/geocat into geocat_trunk