On successful login, change the permissions to the existing xauth

instead of writing the xauth data to user's home directory

Fixes #218