Simplified login logic (storing one authenticated user in session hash since sessions are unique for each browser instance)