2.8: added login_retain() and login_release() for CAP negotiation during login