Fixed security issue for exposing user password hash. Changes to the way login and checkSession are done in order to use the current user object reference in client.