Regenerate session after login/out
No longer comparing hashes with equals operator
NO longer depending on cookie for validating admin
Implemented login check on delete user admin page
Merge pull request #5 from OptimusCrime/auth-fixes

Auth fixes