There is now a session cookie when a user logs in. Added some checks, mainly in the admin pages. Still need to replace checks with current_user with session checks.