switch keys order

LastLoggedOnUser registry key seems more related to what we're looking
for, so let's use it first if available (since Vista).

closes: #2553