Sign in protocol modified.

User access is now controled by the SecurityInitiator and when an user
signs in or up its entity object is registered in the session.