Make login nick-based

Originally, logging in was master-based. If the master account was
logged in, all its alts were logged in as well. This allowed an
exploit in which someone changes their nick to that of an alt of a
logged-in account, bypassing the password protection.