modules loader: log wrong use of 'app_use'

Signed-off-by: Oleg Verych <olecom@gmail.com>
userman: disallow protected components if no session/auth done yet

Signed-off-by: Oleg Verych <olecom@gmail.com>