User.last_login is now set on login