Allow provisional users to log in as another user through login link

This destroys the previous session and creates a new one through a
logout-login cycle