Emergency fixes

1. Every valid username could log in with whatever password.
2. The deployed version would log you out once logged in successfully due to time difference messing up the cookie expiration.