* Login/logoff message for each user
fixes #657 - ability to disable custom login
fixes #658 - enable /login via POST with JSON/XML payload:
e.g {"user":"user1","password":"password1"}