Changes after code review

don't track the usage of login commands

because usage tracking requires you to be logged in in the first place

also:
* don't clobber user settings
* don't prompt for consent when the login cookie is expired