Store UserLevel in session table

Actually made that field do something. No more bothering with extra
queries. Of course that means you have to relog to get the effect of
changed permissions.