fix for Meteor.users to re-assign its prototype, also fix insecure login tests and add some ie8 support