removed userip
not needed to login
fixed "too many session" error
added "remove_old=1" to post data sent to auth page, removes oldest session