Fixing problem with non-serializable UserLogin class

When using a different type of Session State, other than InProc, the class needs to be serializable.