Removed some old code, fixed session system

Removed old code for client side password initial hash. (pointless)
Fixed session system.
Removed password recheck from session system given the possibility of
login using other method to account without local password.