CONN-2 Clean up in UserLogin after the issue during the time when fastly was down

**!!! DO NOT MERGE !!!**

So far, we:
* made `$username` and `$password` properties private,
* fixed edge-case with never-ending appends to `returntoquery` parameter,
* added few unit tests