Eskimo's pull request.

I've rewrite the user login verification logic, we'll check username only now, and one user's login request will be refused if he has been online, a unit test was added for it.
UserManage.hpp's comments  were rewrite in English...