Make current_user method return nil when user not found
properly memoize current_user, even if nil
update changelog
Make login_from session return nil instead of false

This method is not in public API, it's protected, but should
behave consistently anyway.
Merge pull request #509 from arnvald/current-user-returns-nil

Make current_user method return nil when user not found