login action re-design: remove auto-redirect to /admin when $_COOKIE is
set.