Prefer session login name over HTTP login name