patch security hole that allowed to to login as any user without password by using -f

Signed-off-by: Mattias Andrée <maandree@operamail.com>