Authentication and admin_bar fixes

- Send username instead of user object in authentication. #class-auth
- Use the set_auth_cookie hook instead of wp_login to account for
ajax-based logins. #class-auth
- Move is_admin_bar_showing check inside the admin_head hook, otherwise
it attempts to trigger before init. #wp-pydio-sso