Allow login_user to set the session as not fresh

Follow up on suggestion for `user_login` creating not fresh session #184