user authentication (etc.. :-)

- user login/logout/creation
- cosmetics
- online detections checks for valid sessionToken