Do not trigger request.login when user is already logged in even http basic auth. header is present. fixes #158