update comeonin
add dummy_checkpw call to login with nil user closes #10