Use login key from ClientLogOnResponse, not ClientNewLoginKey

The former replaced the latter on 17 Oct 2013, causing the first webLogOn attempt to always fail.