Remove login; apply handlers on connection

This should hopefully make things apply more cleanly for reconnections and
fallbacks.
Kill sockets without a valid session