fix "remember me" function
more strict check of user login
check if HTTP_USER_AGENT not set