Set a Login Cycle in UserBackend

because of IDP cookies are persistant and not linked to owncloud user
managemtn cycle, Tokens checking after a successful login and logout are
still valid, even if you come in with a wrong password. Userbackend didn't
know if you came from login.password form or interceptor.