update login session structure
save all login sessions in uid 1 registry
apparently not $core_config['main']['datetime_timezone'] but $core_config['main']['gateway_timezone']
add 3rd option hash on user_session_remove()
auth_isvalid() TRUE only if login session exists
early version of whose online, still need some cleanups
forgot the whose online files