Don't update last_ip and last_login on *every* pageview

Instead, only do it every 5 minutes, *or* if the IP address
has changed. last_login is not used for anything important--
it's only displayed on the users' profile page.