don't send non-login messages before login complete

Fixes trello#48.

Suppress sending any non-login-related messages to the client until
the login process has finished.