New login/out system

Initial commit of new login system
- $_SERVER['PHP_AUTH_USER'] should no longer be used. Use
$_SESSION['PHP_AUTH_USER'] instead
- All instances of $_SERVER php auth replaced with $_SESSION
- Minor changes to drop script