EUCA-3704
added xsrf token change when login or changepassword performed, fixed changepassword bug by not replacing user session if it already exists.