Separate check for password cookie

Otherwise it would not be possible to recall user name.

Signed-off-by: Michal Čihař <michal@cihar.com>
Merge remote-tracking branch 'origin/QA_4_2'